Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3f92727f848a29c670f1239d30bc34284a407b21d5b9edf03c3d54ad77c31da9

  • Size

    72KB

  • Sample

    240921-ywr9zs1bpc

  • MD5

    bdd9f346740327b9f2e3ab702a20fff0

  • SHA1

    f33aaec26a1d492b6ab95423a788b122f8f87ed7

  • SHA256

    3f92727f848a29c670f1239d30bc34284a407b21d5b9edf03c3d54ad77c31da9

  • SHA512

    292083eaa3ea13a81b5213115a649d6adf557ad5114a9b58b0b8994a9fc6df5cc551a7316aa7e6c46c08abaa903493c3215d89c15011747796ac8b44d462c091

  • SSDEEP

    1536:pZBt3IQ2JkqDFNLIKc0u4VqrMZWXABAdY9:rf3IVDHBj9

Malware Config

Targets

    • Target

      3f92727f848a29c670f1239d30bc34284a407b21d5b9edf03c3d54ad77c31da9

    • Size

      72KB

    • MD5

      bdd9f346740327b9f2e3ab702a20fff0

    • SHA1

      f33aaec26a1d492b6ab95423a788b122f8f87ed7

    • SHA256

      3f92727f848a29c670f1239d30bc34284a407b21d5b9edf03c3d54ad77c31da9

    • SHA512

      292083eaa3ea13a81b5213115a649d6adf557ad5114a9b58b0b8994a9fc6df5cc551a7316aa7e6c46c08abaa903493c3215d89c15011747796ac8b44d462c091

    • SSDEEP

      1536:pZBt3IQ2JkqDFNLIKc0u4VqrMZWXABAdY9:rf3IVDHBj9

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks