Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Unconfirmed 168736.crdownload

  • Size

    24.3MB

  • Sample

    240727-gq2ssstdkh

  • MD5

    13b712a106de7b66d4a774f30a215a3c

  • SHA1

    5f204c9d7c1d5b787f6c9a0fa68fa562aa3917ca

  • SHA256

    7c95006a2034b0d22985f31173d341053b2dc2f9cfea80b72f6b0ffdd08f032a

  • SHA512

    6c2306be76c795837e473cf178a8aaf3ccf29c41af5759dcc89682b8065e38b90629d55ae43d6610d5bee91df279d3d3c02a1984bde4b0d6c577f524bcfd05e3

  • SSDEEP

    393216:EHwZAtwEli9ZiTpVRCv3WedTajLVZUNZbzoqA79KvGSFcMF6BGSX:il6ElWZi1VAvGeRiLhqwPSCMMBGSX

Score
7/10

Malware Config

Targets

    • Target

      Unconfirmed 168736.crdownload

    • Size

      24.3MB

    • MD5

      13b712a106de7b66d4a774f30a215a3c

    • SHA1

      5f204c9d7c1d5b787f6c9a0fa68fa562aa3917ca

    • SHA256

      7c95006a2034b0d22985f31173d341053b2dc2f9cfea80b72f6b0ffdd08f032a

    • SHA512

      6c2306be76c795837e473cf178a8aaf3ccf29c41af5759dcc89682b8065e38b90629d55ae43d6610d5bee91df279d3d3c02a1984bde4b0d6c577f524bcfd05e3

    • SSDEEP

      393216:EHwZAtwEli9ZiTpVRCv3WedTajLVZUNZbzoqA79KvGSFcMF6BGSX:il6ElWZi1VAvGeRiLhqwPSCMMBGSX

    Score
    1/10
    • Target

      bin/Monaco/package/esm/vs/editor/contrib/find/findWidget.css

    • Size

      5KB

    • MD5

      4c18d8d5cae9cdff85dbf44b6b8a5df0

    • SHA1

      245cdd39b46242f75a51f69cd1225c16a9b8f3b5

    • SHA256

      70e52975150f4f57ca1d9699bff44efa8ea22bd3942c301a1be8b73c676e7a69

    • SHA512

      b3a31e9289753dd1ae0eaaee971c1e26811be4f04da9f77eceb3206abe7801e0b562f3e4f9f1bf790453bbf069694a15a400e78e39950c4c5ba0ad5e84eab50b

    • SSDEEP

      96:HDGE+KEK11sBLLRWyQ3+B7PSa2tGqFZCRU:t11sBLtW/++LBl

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/folding/folding.css

    • Size

      1KB

    • MD5

      36bd38f90b3e4d47fa72e5def464d11e

    • SHA1

      0a54f86f80ea14a19490f29b569a5ba8cc853bb6

    • SHA256

      952887e7529d8b0f6f00ef99245b5d942498b38e6d722aa3e85ec41cc61a19ff

    • SHA512

      4402db50f6bab004df8bf4c42b606dd34771b8971e02ba06fd0492392765880e20c49efd009291d94247b109077db6d43fb71a59fc51bc82c087c2cbbe59db26

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/gotoError/media/gotoErrorWidget.css

    • Size

      1KB

    • MD5

      9b3b47bf70887b123c612bb659c15cc5

    • SHA1

      b1b0f0b74fd0e29a6175f7bc9767f751f7847e67

    • SHA256

      af627c208f66e7a03060f6af7d68e124f3fc31d69a16416a4d26d893a68a1682

    • SHA512

      b38dfeb2850656ae2f53dfbcf8240d7c9fae880f724c53bc6ff1fe61df3b654ad73f5118c1d2eedd05c7ce19909b334210fe3fa5dcad94667c08928dad83f08f

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/gotoSymbol/link/goToDefinitionAtPosition.css

    • Size

      448B

    • MD5

      4acd1d71543b14c3f0df0088bce0ff79

    • SHA1

      23c9c52525a1a9c96e07025b7f4afd018d49a5d4

    • SHA256

      4c8328ea1e5e344a1b5b0caeb89a5b1652eef6493dac5edf37b2f40e3752630d

    • SHA512

      87aec2095a982dd8eb94515f5434b9610b1bec2456b70cdfff57a666802beeb8618c5e557b9a19d1d7a1cec8ceae5a6d9b735602f9908a4e10286fa4601f68f7

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/gotoSymbol/peek/referencesWidget.css

    • Size

      1KB

    • MD5

      4ccf9347da289de49b41628b9439735c

    • SHA1

      cfe352c1465ceaf1ab0bc5a34167c9ae3c3e16e2

    • SHA256

      862dd6285bcf089e66a829d831b75785ce6b3d2dfc8c695f76a077b59339533c

    • SHA512

      72277f03bd721063de6410dd1e2748e29e90fd6705fb6f9bc87f8e40fd5d0efb7c3d75a214fb49e4e833bce4e9b14eb6221414f3506f606ff7aa6ddb381036b3

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/links/links.css

    • Size

      559B

    • MD5

      bd1f59595a326c329fba541cac3b1fe6

    • SHA1

      1ec3910d84b9766022e988ed062f3853b7f4e06f

    • SHA256

      5407b8a20344cd67547d7f69c009b2624159e980e4160d005e4373043ba04b5c

    • SHA512

      9c62c32868811cd92dd1d1d790089c0bc4f380b8b30f3d71f576a0f70b0b0c92de186a8f2070c76d7debca7aa25afb9657671e62d118b65356b8cade781340c9

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/message/messageController.css

    • Size

      1KB

    • MD5

      d323660d8c213a9b9da0f945ee4f69ec

    • SHA1

      f01d088d4a5c44d3f4d95ba9217f35c37f5052f1

    • SHA256

      08cd809821857f05946095e4a0b13a7e5b3962815585442c4f81d477c14d5c6a

    • SHA512

      b9b71eb3a3b550a5403e9af3f75b25c83979377b84be78e49f6175da59e28b33418978ad0a5f21919c93861d91e71b06434c30a6968640861f963a07f3888cf2

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/parameterHints/parameterHints.css

    • Size

      2KB

    • MD5

      7365146bbeae5982a06a86c018493e94

    • SHA1

      44caf71e2357c25c990767d301dba36178e7be4f

    • SHA256

      c2efbdcbe9c72e1c4953a68bed1946158a4f959109d06dc8b32de17ca77c3be1

    • SHA512

      b1d95e3d8b38efdbcb1b941f1e42adefb9bff3125c43652c5f51d4135abf2082c5324349d0eb3575a69437f58ec5e90863be0fb34f990032f1f63d0893dc3789

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/peekView/media/peekViewWidget.css

    • Size

      2KB

    • MD5

      331896a743bc05d23adfc6557687d8f7

    • SHA1

      a0085fd9bee79d48aee2eb6338b6e0f6676600d5

    • SHA256

      f60e6934b275600030fcc7e8364572df5733fe00032d8ec3bc13c9f0d0932697

    • SHA512

      f278146af6cca2254511115eafa77ab61f8372c09b924ed804a78820686b410c1de5e95b1722846e92dae2fd51b2dbb431c0d693af0eca471e00ba71417ac464

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/snippet/snippetSession.css

    • Size

      561B

    • MD5

      3e3fdc1d0685be3b068d2b09da05298a

    • SHA1

      407b0524850492eefd9041884305812863da9a62

    • SHA256

      c9939da092af0e32aae7f264bb2b00b03f572fc1f880fe18ff6e6105a34316aa

    • SHA512

      55a0da7949539539bf1c409288f51c802da1088bcd5bb13ead693ffdddecafac5bf8b48c39255e7a73dca1da124e09e8d699c950ddae28266bf6e3c2c4d692f7

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/suggest/media/suggest.css

    • Size

      11KB

    • MD5

      3e6c9a8eb9f5c0d48ac835c42cc78b2a

    • SHA1

      49834e312e82d4c20414a079147f0d9028308537

    • SHA256

      7305b13a66a3c1a2edf3656c5f72081245c1b81d0f2de315b41016b5879eaa7f

    • SHA512

      f16c75fa2904dc5ca26a1cc643b8cd29f402f7e6b4f7fe90aa3a97f8edb65f3f747d78312175062dbdffc37d03692da725bbcfdfff270994e20437781e1ac2d4

    • SSDEEP

      192:JdvZdqZg9R8ntQxRGxF/g8wj8JG8zgC8NFJ18Y8DG8iOZwRUMu8Kmi8ZVqG8W8Ox:nRTsuVVq9qSc98e

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/contrib/zoneWidget/zoneWidget.css

    • Size

      616B

    • MD5

      efb5a7a704db1f73259e42eea9aed38c

    • SHA1

      cca017045052d7055d03e080731b1b227410e94a

    • SHA256

      bf5be72d0135b320c34bb2d4ddec197671c7974c8ab93140eee88bca93035c1f

    • SHA512

      8a7e7e9ce0d76a2f60238142c9d2010d63e89446d698fb0afefde0eb53886a871817c18bd4a038f48dfb039ab43aad3e726be03a5472df61b4057e93356a985a

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/editor/standalone/browser/accessibilityHelp/accessibilityHelp.css

    • Size

      465B

    • MD5

      2c6a0e75248e786086862e615b3d42bc

    • SHA1

      d5df437eac2c35d5b0a9d0a9591c25afa0c5a835

    • SHA256

      4b9adb6311b8b03d944fd2ca9424f7afbd13a40da2e2e28e6cf3af8c9fddb593

    • SHA512

      a1de4ae38205c75b9241fb21306e173536e64de3a2932f61880bb1ce3793e803a98a76e5b2e343b79d9d41160772ed227a2f25f06f7ab54baf0d58222e3b2f9f

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      bin/Monaco/package/esm/vs/language/css/monaco.contribution.d.ts

    • Size

      3KB

    • MD5

      b12be634b7c6437f35cd6df1dccf6193

    • SHA1

      b8095c43f8b6ec7b75a7cecc9b5e9d73926e9e8e

    • SHA256

      1a610ebae6686a936a9b684ca428550841f92575f04f59e9394d191b5517e3a2

    • SHA512

      25c48e0a23e7f404269f973104a403d1deb4cf03ef8f80517de5eea72abec96c88ff7a5644249a1ce2408ba48fd2f364c9ea8809cc4587ec302dedb062424402

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      bin/Monaco/package/esm/vs/language/json/fillers/monaco-editor-core.d.ts

    • Size

      37B

    • MD5

      604924c7fd140e65f677cff5c06ea77e

    • SHA1

      60adb20bf4cac895df6b31a4da98a4d2267ca3e6

    • SHA256

      87b3728d7af0f6c25f9cdbedfbc093f5e46a24371910199a638a1a13e3444668

    • SHA512

      34affd619893b93ebfeb0d19daf6c4768b0e3de7d4d8272058cd41608ef9a1f5ceb5951b0b8a7732dd4e3e020d51bda9c9509eed4a3a5705d3a1ad396d610af1

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks