Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5c75e51ab6ae8e25a0486c7075de79f0N

  • Size

    75KB

  • Sample

    240914-k5gmysxapb

  • MD5

    5c75e51ab6ae8e25a0486c7075de79f0

  • SHA1

    dc1625bdd22e050344b86e8931f4665ae3d5ec6f

  • SHA256

    199d082704d404044333ff2e9e86ce545827ebe866f92a8225f787da3436805b

  • SHA512

    1dc7600d6935e00197c89930f44231e67f20119f90e7b448115ad252c75a0ea96282318a666852cb4e3b13db00f532dde9b1d915bea07ca0103501ee817faa03

  • SSDEEP

    768:OrItKyw5WHXfQmjIiIk9ecAakMb96ZyXuDLdibfffsffff2ZZZZnAAAr:Or3Z5IfQmv81abyyXcZibfffsffffT

Malware Config

Targets

    • Target

      5c75e51ab6ae8e25a0486c7075de79f0N

    • Size

      75KB

    • MD5

      5c75e51ab6ae8e25a0486c7075de79f0

    • SHA1

      dc1625bdd22e050344b86e8931f4665ae3d5ec6f

    • SHA256

      199d082704d404044333ff2e9e86ce545827ebe866f92a8225f787da3436805b

    • SHA512

      1dc7600d6935e00197c89930f44231e67f20119f90e7b448115ad252c75a0ea96282318a666852cb4e3b13db00f532dde9b1d915bea07ca0103501ee817faa03

    • SSDEEP

      768:OrItKyw5WHXfQmjIiIk9ecAakMb96ZyXuDLdibfffsffff2ZZZZnAAAr:Or3Z5IfQmv81abyyXcZibfffsffffT

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks