Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    000c13477a518c8512baadb8a985bf20N.exe

  • Size

    497KB

  • Sample

    240806-yxcwpasgke

  • MD5

    000c13477a518c8512baadb8a985bf20

  • SHA1

    af704381bbed1e70d4158d47c4f2cdeaf0e67a97

  • SHA256

    1d55184e6e3584e518c1ea703fdcdb35c6a9505d44f2cdc892b94606571387a2

  • SHA512

    0f4149e8de7553f30c4b0901473208ff0804c694024f29c6a51f1c5d5f9393c659cc1dfc0bdb8acc47cbc6320af1ce93c16966e9cbd75414c2ba811479d9824d

  • SSDEEP

    12288:bYYZr6ypt7xGspjYu+Uhx63UXBQddduJDOxen:bYcr6y/xxsg9BND0en

Score
9/10

Malware Config

Targets

    • Target

      000c13477a518c8512baadb8a985bf20N.exe

    • Size

      497KB

    • MD5

      000c13477a518c8512baadb8a985bf20

    • SHA1

      af704381bbed1e70d4158d47c4f2cdeaf0e67a97

    • SHA256

      1d55184e6e3584e518c1ea703fdcdb35c6a9505d44f2cdc892b94606571387a2

    • SHA512

      0f4149e8de7553f30c4b0901473208ff0804c694024f29c6a51f1c5d5f9393c659cc1dfc0bdb8acc47cbc6320af1ce93c16966e9cbd75414c2ba811479d9824d

    • SSDEEP

      12288:bYYZr6ypt7xGspjYu+Uhx63UXBQddduJDOxen:bYcr6y/xxsg9BND0en

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks