Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    787425138213717491.bat

  • Size

    13KB

  • Sample

    240723-lwsjjazhml

  • MD5

    0a25cf9536f74e79764b265e8fcd047f

  • SHA1

    dd0a5f03510e32d76d4f26b4ccf0f7c54cdd34ea

  • SHA256

    34db335994e0efef9955a0d881e264c880237d7afdfc8a5b0e13df7a502d0279

  • SHA512

    d976fce794825754d96d23cf6a0159b6f407b5d95eb0abca992a6681d31f011ebab7606fdea9057784545ec3d9cdc8df7fda4b09cfcfbfe4457f954a655e66a1

  • SSDEEP

    384:Uxyf0fBSx0RYoqPwiTW6Lqtk0Cxvr0TJV2JsO9:1nxKFqPk6Gtk0CxQJV2SO9

Score
8/10

Malware Config

Targets

    • Target

      787425138213717491.bat

    • Size

      13KB

    • MD5

      0a25cf9536f74e79764b265e8fcd047f

    • SHA1

      dd0a5f03510e32d76d4f26b4ccf0f7c54cdd34ea

    • SHA256

      34db335994e0efef9955a0d881e264c880237d7afdfc8a5b0e13df7a502d0279

    • SHA512

      d976fce794825754d96d23cf6a0159b6f407b5d95eb0abca992a6681d31f011ebab7606fdea9057784545ec3d9cdc8df7fda4b09cfcfbfe4457f954a655e66a1

    • SSDEEP

      384:Uxyf0fBSx0RYoqPwiTW6Lqtk0Cxvr0TJV2JsO9:1nxKFqPk6Gtk0CxQJV2SO9

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks