Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    56b002d97cb785113a56650fb17153278e6e76da8963f8e80846a25c81903100

  • Size

    167KB

  • Sample

    240808-1e24zazerl

  • MD5

    6cbc0f821f1c91c807a8408ad2651fea

  • SHA1

    5d5206e909483635cbf02c08c48952027b231b1c

  • SHA256

    56b002d97cb785113a56650fb17153278e6e76da8963f8e80846a25c81903100

  • SHA512

    aa0f003a58ec2cafba35bf2eb98019af9aaaaa12d056dde6f0e1f8c697187087d87d014116e760e84180ece093d9d2fc724e20af85724e267cd4ed39b3038510

  • SSDEEP

    1536:i2WDcOpULCH0a+TNXyyXetH28JZveKivnmOOOU:zWDuLzZXyyXeECveDnmOOOU

Malware Config

Targets

    • Target

      56b002d97cb785113a56650fb17153278e6e76da8963f8e80846a25c81903100

    • Size

      167KB

    • MD5

      6cbc0f821f1c91c807a8408ad2651fea

    • SHA1

      5d5206e909483635cbf02c08c48952027b231b1c

    • SHA256

      56b002d97cb785113a56650fb17153278e6e76da8963f8e80846a25c81903100

    • SHA512

      aa0f003a58ec2cafba35bf2eb98019af9aaaaa12d056dde6f0e1f8c697187087d87d014116e760e84180ece093d9d2fc724e20af85724e267cd4ed39b3038510

    • SSDEEP

      1536:i2WDcOpULCH0a+TNXyyXetH28JZveKivnmOOOU:zWDuLzZXyyXeECveDnmOOOU

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks