Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    261463194548020265.bat

  • Size

    16KB

  • Sample

    240720-2a487szcnl

  • MD5

    0b84678193f96f2090de54dcb8873cd2

  • SHA1

    361c1f8bd67b4637344b9d9be78dd9057731f97e

  • SHA256

    526d3423b43a9571ccb1516090bccc5c69ea8ce96200c19a1dd54808067efb63

  • SHA512

    c4784f3508a344da79ef672c734b5a55941a47e8c786795262453d5ccfa47d6cae6a344389de63b9c081308f778de47b7b6daa5d3e78dae99e2694a04a2aa6d3

  • SSDEEP

    384:094Z75OcyuEY2O3tbMh9RlmRsTo0SVJ9wzMh4eAE:w4hRibwT9uq4eAE

Score
8/10

Malware Config

Targets

    • Target

      261463194548020265.bat

    • Size

      16KB

    • MD5

      0b84678193f96f2090de54dcb8873cd2

    • SHA1

      361c1f8bd67b4637344b9d9be78dd9057731f97e

    • SHA256

      526d3423b43a9571ccb1516090bccc5c69ea8ce96200c19a1dd54808067efb63

    • SHA512

      c4784f3508a344da79ef672c734b5a55941a47e8c786795262453d5ccfa47d6cae6a344389de63b9c081308f778de47b7b6daa5d3e78dae99e2694a04a2aa6d3

    • SSDEEP

      384:094Z75OcyuEY2O3tbMh9RlmRsTo0SVJ9wzMh4eAE:w4hRibwT9uq4eAE

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks