Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    13788112522372921275.bat

  • Size

    20KB

  • Sample

    240723-vm58pszgnk

  • MD5

    eef9f97abac3a6d52f1235a13469cfe5

  • SHA1

    a7bcc45ca679bc4d6e899544be29d848a82c5814

  • SHA256

    0f6d9e0b62b77d64370e411f896368004b3564eb312641b4884374f2f7fd72e9

  • SHA512

    6d26b0f45df800ce55398553a05382da4279e82a6031478aef18d2cc281d3282246cd8544571e8ede2738fb17d7aa5a520fefef1ee78a5bea52c2c5ece10ebd8

  • SSDEEP

    384:f/R8WhPd4OQn1kFlOfOtXdkuRouEG3z9/JKGX7v1amOiee:f/R8WsO0kMuNkumK3zJgS9rb/

Score
8/10

Malware Config

Targets

    • Target

      13788112522372921275.bat

    • Size

      20KB

    • MD5

      eef9f97abac3a6d52f1235a13469cfe5

    • SHA1

      a7bcc45ca679bc4d6e899544be29d848a82c5814

    • SHA256

      0f6d9e0b62b77d64370e411f896368004b3564eb312641b4884374f2f7fd72e9

    • SHA512

      6d26b0f45df800ce55398553a05382da4279e82a6031478aef18d2cc281d3282246cd8544571e8ede2738fb17d7aa5a520fefef1ee78a5bea52c2c5ece10ebd8

    • SSDEEP

      384:f/R8WhPd4OQn1kFlOfOtXdkuRouEG3z9/JKGX7v1amOiee:f/R8WsO0kMuNkumK3zJgS9rb/

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks