Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    43fae6a60dffcc47045c6f132d41ec77db2134dc825c35d1bf3abeb7210226cd

  • Size

    5.0MB

  • Sample

    240820-gnsr4szgmj

  • MD5

    6d7b8f5bfd03d8fdacebd97ea437b559

  • SHA1

    d7b3a1bcd0b1cda98805165e726cc8716d86c1f4

  • SHA256

    43fae6a60dffcc47045c6f132d41ec77db2134dc825c35d1bf3abeb7210226cd

  • SHA512

    12b15265295f1e7fbb4a1e75a43ac2fa9e988526724032fd20d2053ab47832488759b0be8e562be391ddecc2eab4d3ec98279e825e6cfcc73b356093a6a53ca6

  • SSDEEP

    98304:NcFiJETrDllPOOCrbAyNa0hdvV8Y288tjxGjQ/cshPyBe+Rr0NuTBpVY:jJSDbPOEodvO88tjxGjQEsae+5ntY

Malware Config

Targets

    • Target

      43fae6a60dffcc47045c6f132d41ec77db2134dc825c35d1bf3abeb7210226cd

    • Size

      5.0MB

    • MD5

      6d7b8f5bfd03d8fdacebd97ea437b559

    • SHA1

      d7b3a1bcd0b1cda98805165e726cc8716d86c1f4

    • SHA256

      43fae6a60dffcc47045c6f132d41ec77db2134dc825c35d1bf3abeb7210226cd

    • SHA512

      12b15265295f1e7fbb4a1e75a43ac2fa9e988526724032fd20d2053ab47832488759b0be8e562be391ddecc2eab4d3ec98279e825e6cfcc73b356093a6a53ca6

    • SSDEEP

      98304:NcFiJETrDllPOOCrbAyNa0hdvV8Y288tjxGjQ/cshPyBe+Rr0NuTBpVY:jJSDbPOEodvO88tjxGjQEsae+5ntY

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks