Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
39a6f19fe835ddba6e650e13d2579f102574a984796094fab0d9ab7e12f031d8
-
Size
1.0MB
-
Sample
240901-z28dtssene
-
MD5
56cb4177698cacbaf3f194fbc133f3d5
-
SHA1
6b52cec6871d408f7e71584eea5ea08b103130ad
-
SHA256
39a6f19fe835ddba6e650e13d2579f102574a984796094fab0d9ab7e12f031d8
-
SHA512
c47813abaa38f4fd758e6d277311a3fcdac317cacee7a852461a10b2e2f90697f9eddfa325a257acc1d086b401770794f38af93ebd7327b006d46e647a171a4a
-
SSDEEP
12288:Mmhjxw7dUlzn3DSudvsh8Awf3XFaZmBITVJPtSrE37yG2LmxL5BwcyQVaE:Lhe7alj3DSudvGM3MXTVhtSQWGtxkPQF
Static task
static1
Behavioral task
behavioral1
Sample
39a6f19fe835ddba6e650e13d2579f102574a984796094fab0d9ab7e12f031d8.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
39a6f19fe835ddba6e650e13d2579f102574a984796094fab0d9ab7e12f031d8
-
Size
1.0MB
-
MD5
56cb4177698cacbaf3f194fbc133f3d5
-
SHA1
6b52cec6871d408f7e71584eea5ea08b103130ad
-
SHA256
39a6f19fe835ddba6e650e13d2579f102574a984796094fab0d9ab7e12f031d8
-
SHA512
c47813abaa38f4fd758e6d277311a3fcdac317cacee7a852461a10b2e2f90697f9eddfa325a257acc1d086b401770794f38af93ebd7327b006d46e647a171a4a
-
SSDEEP
12288:Mmhjxw7dUlzn3DSudvsh8Awf3XFaZmBITVJPtSrE37yG2LmxL5BwcyQVaE:Lhe7alj3DSudvGM3MXTVhtSQWGtxkPQF
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Discovery
Network Service Discovery
1Network Share Discovery
1Process Discovery
1Query Registry
2Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Network Connections Discovery
1