Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    14b86f70c28d4aab03957c0c643d197aea7d04afe9b1c73f0e7d6baf3acf39d8

  • Size

    622KB

  • Sample

    241017-xhs4pashqq

  • MD5

    4b025c5ceb5fca6da9bc97826731662e

  • SHA1

    0007aee151ee1c121ae495cb1a748b0cbdc12bd7

  • SHA256

    14b86f70c28d4aab03957c0c643d197aea7d04afe9b1c73f0e7d6baf3acf39d8

  • SHA512

    438517b2fd026079385958fdf477f5bf85b8290253c47c876e99810805d2b05bf37eef9f9ca7e5a6c7dd6f540a56d4c4d258c36c1b58c6cdd097c0adc4d1b0e3

  • SSDEEP

    12288:6Sq7BGgknkKQ/+AgEwDO4EwF2eNQ7m1C1+u88:6SWBhknJQ/+kMNh1w+O

Malware Config

Targets

    • Target

      14b86f70c28d4aab03957c0c643d197aea7d04afe9b1c73f0e7d6baf3acf39d8

    • Size

      622KB

    • MD5

      4b025c5ceb5fca6da9bc97826731662e

    • SHA1

      0007aee151ee1c121ae495cb1a748b0cbdc12bd7

    • SHA256

      14b86f70c28d4aab03957c0c643d197aea7d04afe9b1c73f0e7d6baf3acf39d8

    • SHA512

      438517b2fd026079385958fdf477f5bf85b8290253c47c876e99810805d2b05bf37eef9f9ca7e5a6c7dd6f540a56d4c4d258c36c1b58c6cdd097c0adc4d1b0e3

    • SSDEEP

      12288:6Sq7BGgknkKQ/+AgEwDO4EwF2eNQ7m1C1+u88:6SWBhknJQ/+kMNh1w+O

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks