Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    978bb9796b07766b43b78758b8bc31fef1d7bda18941c21ffe4371ff21814f2d

  • Size

    78KB

  • Sample

    250306-h8m8sssq18

  • MD5

    832f10834d64a76954d12175be83ba7c

  • SHA1

    4139efe1c43da2cfbc667a863b5de9aebd258716

  • SHA256

    978bb9796b07766b43b78758b8bc31fef1d7bda18941c21ffe4371ff21814f2d

  • SHA512

    24f4b97e07bed9567ccf7582838c46b459ea5b5a26e24a42ea6d24fa952bedc090479ebdada021e91e8d33a9426dacfa385e750f440e9f2f0002190dc8d927b9

  • SSDEEP

    1536:VStHFo6rdELT8hn2Ep7WzPdVj6Ju8B3AZ242UdIAkD4x3HT4hPVoYdVQtL29/KKi:VStHFo8dSE2EwR4uY41HyvYL29/Q

Malware Config

Targets

    • Target

      978bb9796b07766b43b78758b8bc31fef1d7bda18941c21ffe4371ff21814f2d

    • Size

      78KB

    • MD5

      832f10834d64a76954d12175be83ba7c

    • SHA1

      4139efe1c43da2cfbc667a863b5de9aebd258716

    • SHA256

      978bb9796b07766b43b78758b8bc31fef1d7bda18941c21ffe4371ff21814f2d

    • SHA512

      24f4b97e07bed9567ccf7582838c46b459ea5b5a26e24a42ea6d24fa952bedc090479ebdada021e91e8d33a9426dacfa385e750f440e9f2f0002190dc8d927b9

    • SSDEEP

      1536:VStHFo6rdELT8hn2Ep7WzPdVj6Ju8B3AZ242UdIAkD4x3HT4hPVoYdVQtL29/KKi:VStHFo8dSE2EwR4uY41HyvYL29/Q

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Metamorpherrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks