Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e7a987677a2cdb2a8c6591c152fc425fdbac393946f47f53c83fa0614abc42d3N

  • Size

    152KB

  • Sample

    241012-yb8q8sxgqg

  • MD5

    219b2ae172e6c468f606a446524e0060

  • SHA1

    cbc36958d20b2739344d925523ffc512aacacc05

  • SHA256

    e7a987677a2cdb2a8c6591c152fc425fdbac393946f47f53c83fa0614abc42d3

  • SHA512

    64070101b2277a024c485249c7c381482a29e9572884226e98ecb990fa8e2070d044c50b734df91601a85413de596aac11c256cb17122ca6ce90eadaa604bca3

  • SSDEEP

    3072:L34IpK9xKA9w2p4QZisLaazNiIIkyyqY4oQZiEdr:L3/pKxY+1isuazgfkl/Wr

Malware Config

Targets

    • Target

      e7a987677a2cdb2a8c6591c152fc425fdbac393946f47f53c83fa0614abc42d3N

    • Size

      152KB

    • MD5

      219b2ae172e6c468f606a446524e0060

    • SHA1

      cbc36958d20b2739344d925523ffc512aacacc05

    • SHA256

      e7a987677a2cdb2a8c6591c152fc425fdbac393946f47f53c83fa0614abc42d3

    • SHA512

      64070101b2277a024c485249c7c381482a29e9572884226e98ecb990fa8e2070d044c50b734df91601a85413de596aac11c256cb17122ca6ce90eadaa604bca3

    • SSDEEP

      3072:L34IpK9xKA9w2p4QZisLaazNiIIkyyqY4oQZiEdr:L3/pKxY+1isuazgfkl/Wr

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks