Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    BatiHotkey.exe

  • Size

    711KB

  • Sample

    240806-vl2h5ayckf

  • MD5

    37535524fdc33dc2c00621fac13cd854

  • SHA1

    b5907488b6e15d7cb846d4daab4385fa217b18a9

  • SHA256

    75702ad722cc4c3443fcef86635b0166708f35f7ee9c37344852e42bd6a53f48

  • SHA512

    409b7a091c52330399270eed76022c585efe10ab42bd96c4fcb0f18d6f4141e0bcacdab5919fc7df92b7324ad162f8f2b173fd3c8324201daaa058a74b48acdd

  • SSDEEP

    12288:YU+9H3900EJqrekLEyTYQcDL/TNuUCziP6VFGO5lrEaKYNtcBvAuvlee2NCFbLkF:YU+9XNrenyktDLdYNtcdvQNC9wHAP5c1

Score
7/10

Malware Config

Targets

    • Target

      BatiHotkey.exe

    • Size

      711KB

    • MD5

      37535524fdc33dc2c00621fac13cd854

    • SHA1

      b5907488b6e15d7cb846d4daab4385fa217b18a9

    • SHA256

      75702ad722cc4c3443fcef86635b0166708f35f7ee9c37344852e42bd6a53f48

    • SHA512

      409b7a091c52330399270eed76022c585efe10ab42bd96c4fcb0f18d6f4141e0bcacdab5919fc7df92b7324ad162f8f2b173fd3c8324201daaa058a74b48acdd

    • SSDEEP

      12288:YU+9H3900EJqrekLEyTYQcDL/TNuUCziP6VFGO5lrEaKYNtcBvAuvlee2NCFbLkF:YU+9XNrenyktDLdYNtcdvQNC9wHAP5c1

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks