Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c1cf11f6a8b726d072216b98d4feb2b12e73b17f2f64253b0ee761b8365f97dfN.exe

  • Size

    130KB

  • Sample

    240925-jmqbpstcpl

  • MD5

    e99bd9be832a4f467974459da47099e0

  • SHA1

    fc38974ecc3de8d75bb61eac78c5082ca80bc706

  • SHA256

    c1cf11f6a8b726d072216b98d4feb2b12e73b17f2f64253b0ee761b8365f97df

  • SHA512

    09667aa01933b411c75a205d1783b92ac7e2a4bd3c0394950e34d4306713577c7aed88f88ab8af8a07a44a6c2580b9460c25319e5d58d082ef7f28dc0c2357ee

  • SSDEEP

    3072:kcjjuSrGn/x4+e7gyUvOvR0BZNnvRF0oHoGJW+kXfdPC7ho0rSzJ6V30qD+:kcjjuSrGn/x4+e7PUvOvR0BZNnv30oHI

Score
7/10

Malware Config

Targets

    • Target

      c1cf11f6a8b726d072216b98d4feb2b12e73b17f2f64253b0ee761b8365f97dfN.exe

    • Size

      130KB

    • MD5

      e99bd9be832a4f467974459da47099e0

    • SHA1

      fc38974ecc3de8d75bb61eac78c5082ca80bc706

    • SHA256

      c1cf11f6a8b726d072216b98d4feb2b12e73b17f2f64253b0ee761b8365f97df

    • SHA512

      09667aa01933b411c75a205d1783b92ac7e2a4bd3c0394950e34d4306713577c7aed88f88ab8af8a07a44a6c2580b9460c25319e5d58d082ef7f28dc0c2357ee

    • SSDEEP

      3072:kcjjuSrGn/x4+e7gyUvOvR0BZNnvRF0oHoGJW+kXfdPC7ho0rSzJ6V30qD+:kcjjuSrGn/x4+e7PUvOvR0BZNnv30oHI

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks