Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7829217041927821965.bat

  • Size

    12KB

  • Sample

    240722-rr9j5ssbmh

  • MD5

    12a8d51e88a03ea9a432b1eca6bff146

  • SHA1

    52ebe45326c725fce304b46d7a714853ec72da65

  • SHA256

    853629c9c1862de3af867cddf8b713c2180631c377e71cbe181837f0966302f1

  • SHA512

    2dd2423211ddafee5ec75bc365767f205bae7e9fb0c04451627b1f7a9a5d00fe13c18dadcaab70a1d71e6fc1ce8a42c00ddbd9bc261fc69ee1c39ff5a6d0bc08

  • SSDEEP

    384:Pwi9Osbne6k0VL+XABChcKhcWB1BI+zeprg6mFcHd0+:PFIsbeIL+XrhcKhcWfBz3mHd0+

Score
8/10

Malware Config

Targets

    • Target

      7829217041927821965.bat

    • Size

      12KB

    • MD5

      12a8d51e88a03ea9a432b1eca6bff146

    • SHA1

      52ebe45326c725fce304b46d7a714853ec72da65

    • SHA256

      853629c9c1862de3af867cddf8b713c2180631c377e71cbe181837f0966302f1

    • SHA512

      2dd2423211ddafee5ec75bc365767f205bae7e9fb0c04451627b1f7a9a5d00fe13c18dadcaab70a1d71e6fc1ce8a42c00ddbd9bc261fc69ee1c39ff5a6d0bc08

    • SSDEEP

      384:Pwi9Osbne6k0VL+XABChcKhcWB1BI+zeprg6mFcHd0+:PFIsbeIL+XrhcKhcWfBz3mHd0+

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks