Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    62e2081e605263a3a9db323f34514fcc0e873262abbe8dc62c5b03d4d770eebe

  • Size

    78KB

  • Sample

    250306-dxbneaxnv2

  • MD5

    303f3852e9c33033c8483c618666d6fa

  • SHA1

    2d3753a342d4e4edb2c27ecb08fc1d84a7998b97

  • SHA256

    62e2081e605263a3a9db323f34514fcc0e873262abbe8dc62c5b03d4d770eebe

  • SHA512

    d25a8df50ce8165528b9f7918d7eb5cf80d55f24faa25cbae4e9fa2dedd9b7e7f71be1d30c25a743c78275e2aa75a587ea163271633153d2a7ea2aa19ebd411a

  • SSDEEP

    1536:FWV5jULT8hn2Ep7WzPdVj6Ju8B3AZ242UdIAkD4x3HT4hPVoYdVQti6a9/L1ZG:FWV5jiE2EwR4uY41HyvYi9/a

Malware Config

Targets

    • Target

      62e2081e605263a3a9db323f34514fcc0e873262abbe8dc62c5b03d4d770eebe

    • Size

      78KB

    • MD5

      303f3852e9c33033c8483c618666d6fa

    • SHA1

      2d3753a342d4e4edb2c27ecb08fc1d84a7998b97

    • SHA256

      62e2081e605263a3a9db323f34514fcc0e873262abbe8dc62c5b03d4d770eebe

    • SHA512

      d25a8df50ce8165528b9f7918d7eb5cf80d55f24faa25cbae4e9fa2dedd9b7e7f71be1d30c25a743c78275e2aa75a587ea163271633153d2a7ea2aa19ebd411a

    • SSDEEP

      1536:FWV5jULT8hn2Ep7WzPdVj6Ju8B3AZ242UdIAkD4x3HT4hPVoYdVQti6a9/L1ZG:FWV5jiE2EwR4uY41HyvYi9/a

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Metamorpherrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks