Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Forza-Mods-AIO

  • Size

    165KB

  • Sample

    240723-vbk4dssepa

  • MD5

    a612da9b3b295269e5b1ef53190e8371

  • SHA1

    5149111019fa2edac4c0e698a276d945b55b4426

  • SHA256

    34551cd7f251ac53e3f76e67732ddbc857088005cfaa9fee8a7bc0a9b9d41814

  • SHA512

    0b94b039d43ebd180c28a90e9fe2213d756e68a2be00d5f9762f9f1350d71e968e20b8a14f721752290f5c926db9265eda31f12956566a2e8e1c61e699cd9dff

  • SSDEEP

    3072:QK3Lya4KM82VinYucbok8ValLPfkghqSaCAJcKEWV+vut/1Nt0MM0ehjjjQ4lO3t:i/o1ZREc4kuX96h1LBJz086v642E97vk

Score
7/10

Malware Config

Targets

    • Target

      Forza-Mods-AIO

    • Size

      165KB

    • MD5

      a612da9b3b295269e5b1ef53190e8371

    • SHA1

      5149111019fa2edac4c0e698a276d945b55b4426

    • SHA256

      34551cd7f251ac53e3f76e67732ddbc857088005cfaa9fee8a7bc0a9b9d41814

    • SHA512

      0b94b039d43ebd180c28a90e9fe2213d756e68a2be00d5f9762f9f1350d71e968e20b8a14f721752290f5c926db9265eda31f12956566a2e8e1c61e699cd9dff

    • SSDEEP

      3072:QK3Lya4KM82VinYucbok8ValLPfkghqSaCAJcKEWV+vut/1Nt0MM0ehjjjQ4lO3t:i/o1ZREc4kuX96h1LBJz086v642E97vk

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks