Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b9fea94be4dc076112d393ae7aa81e9e254b38e1c1c12f852d853355179b89a9N

  • Size

    191KB

  • Sample

    241004-3wqtdaxfph

  • MD5

    fe77d628901694a44391928b9eaa5ef0

  • SHA1

    434e9891c36d767e90d9f004c18e9a0fe4c1de52

  • SHA256

    b9fea94be4dc076112d393ae7aa81e9e254b38e1c1c12f852d853355179b89a9

  • SHA512

    81ebb218f7e980c60a4e7f572d609c6aae9f124609c7ff8b1b18e8d925503e3de992e1a7eddec863dcf73416eea31a2ae90906e12fb56c8890296703385fc9c2

  • SSDEEP

    3072:I82162ffD2O2U9PGAZRc8SDdw0Gd3gbPD2gGm8IRZjB2tC0r5Lvet++6Qqwkv4rb:I8G6ufD7pPbc7pn8QbPDVZ3RD+C0la6B

Malware Config

Targets

    • Target

      b9fea94be4dc076112d393ae7aa81e9e254b38e1c1c12f852d853355179b89a9N

    • Size

      191KB

    • MD5

      fe77d628901694a44391928b9eaa5ef0

    • SHA1

      434e9891c36d767e90d9f004c18e9a0fe4c1de52

    • SHA256

      b9fea94be4dc076112d393ae7aa81e9e254b38e1c1c12f852d853355179b89a9

    • SHA512

      81ebb218f7e980c60a4e7f572d609c6aae9f124609c7ff8b1b18e8d925503e3de992e1a7eddec863dcf73416eea31a2ae90906e12fb56c8890296703385fc9c2

    • SSDEEP

      3072:I82162ffD2O2U9PGAZRc8SDdw0Gd3gbPD2gGm8IRZjB2tC0r5Lvet++6Qqwkv4rb:I8G6ufD7pPbc7pn8QbPDVZ3RD+C0la6B

    • Modifies firewall policy service

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks