Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    46233658f6499adbb58501d286792830234e7a476c6739b9e6f0c72523ff0c81

  • Size

    78KB

  • Sample

    250309-248hqavkt6

  • MD5

    ebf1474d2a83176252bfcb948af8c175

  • SHA1

    4f07e9560e3960257e099df00b06e0c6982bcda8

  • SHA256

    46233658f6499adbb58501d286792830234e7a476c6739b9e6f0c72523ff0c81

  • SHA512

    d1cdd8903151d0f523fc298563b9026c7fa580ec9caab33fed926a28639ab3d76ad59228a3c847df12babeee544e760f390927423da919c051f8e7eb10a62696

  • SSDEEP

    1536:k5jSVdy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQt96Y9/hD11F:k5jSAn7N041QqhgT9/hJ

Malware Config

Targets

    • Target

      46233658f6499adbb58501d286792830234e7a476c6739b9e6f0c72523ff0c81

    • Size

      78KB

    • MD5

      ebf1474d2a83176252bfcb948af8c175

    • SHA1

      4f07e9560e3960257e099df00b06e0c6982bcda8

    • SHA256

      46233658f6499adbb58501d286792830234e7a476c6739b9e6f0c72523ff0c81

    • SHA512

      d1cdd8903151d0f523fc298563b9026c7fa580ec9caab33fed926a28639ab3d76ad59228a3c847df12babeee544e760f390927423da919c051f8e7eb10a62696

    • SSDEEP

      1536:k5jSVdy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQt96Y9/hD11F:k5jSAn7N041QqhgT9/hJ

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Metamorpherrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks