Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f7746e5cc7ed28f0eeda18abf65a26b041e4cd9cab90ebf97e17e56638afb833.exe

  • Size

    78KB

  • Sample

    250109-a7a8va1jgs

  • MD5

    109d04e78bfb70fc51dd6e676f63a499

  • SHA1

    6b5000d942424709ff397c07c129552f9413af8a

  • SHA256

    f7746e5cc7ed28f0eeda18abf65a26b041e4cd9cab90ebf97e17e56638afb833

  • SHA512

    f2bd03d0e13b322c8c2193cd7f3ed9484e790bf9fc9d6bc93f76dbd9687a261feb296c7b727cb03cc221ec7726d3ec1ee6addd9c4ab3d58bcc917fba451b35d8

  • SSDEEP

    1536:XRCHY6M7t/vZv0kH9gDDtWzYCnJPeoYrGQteV9/K1Q+V:XRCHYnh/l0Y9MDYrm7eV9/oV

Malware Config

Targets

    • Target

      f7746e5cc7ed28f0eeda18abf65a26b041e4cd9cab90ebf97e17e56638afb833.exe

    • Size

      78KB

    • MD5

      109d04e78bfb70fc51dd6e676f63a499

    • SHA1

      6b5000d942424709ff397c07c129552f9413af8a

    • SHA256

      f7746e5cc7ed28f0eeda18abf65a26b041e4cd9cab90ebf97e17e56638afb833

    • SHA512

      f2bd03d0e13b322c8c2193cd7f3ed9484e790bf9fc9d6bc93f76dbd9687a261feb296c7b727cb03cc221ec7726d3ec1ee6addd9c4ab3d58bcc917fba451b35d8

    • SSDEEP

      1536:XRCHY6M7t/vZv0kH9gDDtWzYCnJPeoYrGQteV9/K1Q+V:XRCHYnh/l0Y9MDYrm7eV9/oV

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Metamorpherrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks