Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    https://file9.gofile.io/download/web/f2c9bc30-2dfc-400c-8d19-fff496fefd3c/AnnoyMe.exe

  • Sample

    241010-thhq6syhrn

Score
8/10

Malware Config

Targets

    • Target

      https://file9.gofile.io/download/web/f2c9bc30-2dfc-400c-8d19-fff496fefd3c/AnnoyMe.exe

    Score
    8/10
    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Modifies file permissions

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.