Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c3de679d46d7af04fb19fec872658950N.exe

  • Size

    60KB

  • Sample

    240723-q4nmrstamr

  • MD5

    c3de679d46d7af04fb19fec872658950

  • SHA1

    715a2062a806ad6ac2c1bd8915b4175cbd9432b5

  • SHA256

    033a9bdf81cd99f3aac4ccd914b91de59ec3c7ab0aa825511487675f3017816d

  • SHA512

    cae8bdf84fbd586d32c21386e16fa9f6ea459fbbce3f02d32fc6061763ab603307d9184ae2e19f261840a3fa185a358eaee28b77219d25dc8e0aecf5abb7b766

  • SSDEEP

    768:ETgAcnILz6H4PwVjHovQ/o/THkbAqs3OfKDHGlHRJ6Wd:ETCy0CQjH2oQ+RJ6Wd

Score
10/10

Malware Config

Targets

    • Target

      c3de679d46d7af04fb19fec872658950N.exe

    • Size

      60KB

    • MD5

      c3de679d46d7af04fb19fec872658950

    • SHA1

      715a2062a806ad6ac2c1bd8915b4175cbd9432b5

    • SHA256

      033a9bdf81cd99f3aac4ccd914b91de59ec3c7ab0aa825511487675f3017816d

    • SHA512

      cae8bdf84fbd586d32c21386e16fa9f6ea459fbbce3f02d32fc6061763ab603307d9184ae2e19f261840a3fa185a358eaee28b77219d25dc8e0aecf5abb7b766

    • SSDEEP

      768:ETgAcnILz6H4PwVjHovQ/o/THkbAqs3OfKDHGlHRJ6Wd:ETCy0CQjH2oQ+RJ6Wd

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks