Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0652036defd5d49dc407052472a2772d895e29808e3df666a095b578109694a0

  • Size

    78KB

  • Sample

    250310-x3snnavqt7

  • MD5

    1380c72dc706ed1f41d03a0dd1c40aa5

  • SHA1

    e4bbfb17dcc60f052ed667d6c8d64d397a8d4df2

  • SHA256

    0652036defd5d49dc407052472a2772d895e29808e3df666a095b578109694a0

  • SHA512

    a55f682089c36e38579b4d4599de17773503164ac99d1b9f7efb736cde5dfd08b66384b554a525ebf9976af92fec4c61549913431b1297489384a34518191748

  • SSDEEP

    1536:Ny5Xdy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtC6j9/N01tl:Ny52n7N041Qqhg79/4

Malware Config

Targets

    • Target

      0652036defd5d49dc407052472a2772d895e29808e3df666a095b578109694a0

    • Size

      78KB

    • MD5

      1380c72dc706ed1f41d03a0dd1c40aa5

    • SHA1

      e4bbfb17dcc60f052ed667d6c8d64d397a8d4df2

    • SHA256

      0652036defd5d49dc407052472a2772d895e29808e3df666a095b578109694a0

    • SHA512

      a55f682089c36e38579b4d4599de17773503164ac99d1b9f7efb736cde5dfd08b66384b554a525ebf9976af92fec4c61549913431b1297489384a34518191748

    • SSDEEP

      1536:Ny5Xdy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtC6j9/N01tl:Ny52n7N041Qqhg79/4

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Metamorpherrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks