Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

2968429850...00.bat

windows7-x64

8

2968429850...00.bat

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2968429850127887600.bat

  • Size

    11KB

  • Sample

    240721-gmwsdaxbrj

  • MD5

    0c4f20efaa0590c071b717c328598ee7

  • SHA1

    5bfea24d037d1cc34bd4cad0558d3d1fdb01658a

  • SHA256

    a8e0b9b4296ccfbf5457b30d130a4b5d58484eff1521f7986e116addd9dd2bc7

  • SHA512

    fc4a2799c0e74f47a423f88ecba56168958f129422bec8a5da66ab2dddfaf1f970831d4f692968cc1209d09caaa4ff3cef764b05c44353b6b95984837530339e

  • SSDEEP

    192:061XUpzPbsU7HNLkEkPohm4pSl4k+ioYTVasAubIr/vQkrzab3wi6DYRTmgy:06WfTQo0cSR+ZYa7ubuvrabT6DeTmgy

Score
8/10
execution

Malware Config

Targets

    • Target

      2968429850127887600.bat

    • Size

      11KB

    • MD5

      0c4f20efaa0590c071b717c328598ee7

    • SHA1

      5bfea24d037d1cc34bd4cad0558d3d1fdb01658a

    • SHA256

      a8e0b9b4296ccfbf5457b30d130a4b5d58484eff1521f7986e116addd9dd2bc7

    • SHA512

      fc4a2799c0e74f47a423f88ecba56168958f129422bec8a5da66ab2dddfaf1f970831d4f692968cc1209d09caaa4ff3cef764b05c44353b6b95984837530339e

    • SSDEEP

      192:061XUpzPbsU7HNLkEkPohm4pSl4k+ioYTVasAubIr/vQkrzab3wi6DYRTmgy:06WfTQo0cSR+ZYa7ubuvrabT6DeTmgy

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks