Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    17040149102610426347.bat

  • Size

    16KB

  • Sample

    240722-dbp9nsxhrn

  • MD5

    fc31aea06f665c4a337c021f2b636e08

  • SHA1

    5d210e524b21fd5205f1dd78a0ae94ffba28210e

  • SHA256

    2571c1aed9e0afd80f3d9fd582a2243e9290f15dde9dc59ba2d584fe229b0f3e

  • SHA512

    3e53c1584e4a4623c10e8bb40cbb8fd1d078c334d1b8c7640dc770740592c46159d65428df7421f11538767df7be3fed5fa116130a926e1ef77b246f6976711a

  • SSDEEP

    384:cDiivw9HeDghRmjkIH5W8cUYm1cbG8odybruegj:G89HeDgh0Iy5bcS1cdoj

Score
8/10

Malware Config

Targets

    • Target

      17040149102610426347.bat

    • Size

      16KB

    • MD5

      fc31aea06f665c4a337c021f2b636e08

    • SHA1

      5d210e524b21fd5205f1dd78a0ae94ffba28210e

    • SHA256

      2571c1aed9e0afd80f3d9fd582a2243e9290f15dde9dc59ba2d584fe229b0f3e

    • SHA512

      3e53c1584e4a4623c10e8bb40cbb8fd1d078c334d1b8c7640dc770740592c46159d65428df7421f11538767df7be3fed5fa116130a926e1ef77b246f6976711a

    • SSDEEP

      384:cDiivw9HeDghRmjkIH5W8cUYm1cbG8odybruegj:G89HeDgh0Iy5bcS1cdoj

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks