Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4fd4d2abf8a6469fdf87b948fff88c86.bin

  • Size

    6KB

  • Sample

    240720-bp6gpstcnb

  • MD5

    355296a545bec292fc655c79d1b4781b

  • SHA1

    17ba184b7d084aae84ec0ea1d21131b332db345d

  • SHA256

    b55d20cf1f88c4c4fa4d69af794be06b9e6b6dba6e982fe8bec625b594c0455a

  • SHA512

    5a459a29a58d958576782efc2692e647b9bff29763e84524708c25eab56423bade3d7b41e960deb12f8c74dad5efd0f455863093e021704f2e4c26e49a401ef7

  • SSDEEP

    192:la/CdLLIeMI8dinezy9difbC3lJjV6Xu4xUduA6UT:laadLrMKlmzcjVYlx4T

Score
8/10

Malware Config

Targets

    • Target

      14214271933063625124.bat

    • Size

      14KB

    • MD5

      2133a748d31863f8db7ae862d4df63ed

    • SHA1

      97139b6ffcbb5e6302c33d08cf6994ff9066833a

    • SHA256

      725bf69de9d2f64ee1c621e361bf78257b8d3ba65dfc8b62d9db7c8823d82b9e

    • SHA512

      369f8dc47cf1be1cae15295efdae04f57fd5913fd6ec1fae5f83d0cedd371e6295a360a878ac2e82c3e27969143b4e989a1a2168408b246d793e2e8df35aa75b

    • SSDEEP

      384:gr8JWJQqQneAzqK40gb7YorR5XYxKuDLsZRau8:gYEQeA4DbsovATgZRau8

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks