Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    939e2a50370e4f7e641f7db0415925294b4d9e6704c56abda3d7c3d000650ffd

  • Size

    388KB

  • Sample

    240808-a8w7ps1bpc

  • MD5

    437061eecf8e0d4a5882238aa581b9e9

  • SHA1

    441f22d0835170fcffa8da65e7a035c229b6e315

  • SHA256

    939e2a50370e4f7e641f7db0415925294b4d9e6704c56abda3d7c3d000650ffd

  • SHA512

    4e52228ac20d3d685de0bf6bf439d4ef8996bb36d1adc9820de11ecb3200fb5119dd018f7456cf80575d1e4992219343f7d7084c905f73c2ae27efd5f5670b02

  • SSDEEP

    12288:R2iNY2iNY2iNY2iNY2iNY2iNY2iNY2iNF+pABsJ:R1a1a1a1a1a1a1a1O

Malware Config

Targets

    • Target

      939e2a50370e4f7e641f7db0415925294b4d9e6704c56abda3d7c3d000650ffd

    • Size

      388KB

    • MD5

      437061eecf8e0d4a5882238aa581b9e9

    • SHA1

      441f22d0835170fcffa8da65e7a035c229b6e315

    • SHA256

      939e2a50370e4f7e641f7db0415925294b4d9e6704c56abda3d7c3d000650ffd

    • SHA512

      4e52228ac20d3d685de0bf6bf439d4ef8996bb36d1adc9820de11ecb3200fb5119dd018f7456cf80575d1e4992219343f7d7084c905f73c2ae27efd5f5670b02

    • SSDEEP

      12288:R2iNY2iNY2iNY2iNY2iNY2iNY2iNY2iNF+pABsJ:R1a1a1a1a1a1a1a1O

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks