Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

13ff98387a...aa.exe

windows7_x64

8

13ff98387a...aa.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13ff98387aa00e52536cdf8f9d62faab11e96e23867039cbecd4cae8400901aa

  • Size

    908KB

  • Sample

    220603-c2cwlafed8

  • MD5

    7da36a4223890501fc0615bdb3f17733

  • SHA1

    1733cefc70d77674576bda99985d2f5f4be2548f

  • SHA256

    13ff98387aa00e52536cdf8f9d62faab11e96e23867039cbecd4cae8400901aa

  • SHA512

    36d3913d43925afb2e1238b253925541643263ff30eb350a86f7f262f0993141292b820e228e9f5179fb702c46f68b0b48237c9fe3f0b579c43389a8f289d486

Score
8/10
persistence

Malware Config

Targets

    • Target

      13ff98387aa00e52536cdf8f9d62faab11e96e23867039cbecd4cae8400901aa

    • Size

      908KB

    • MD5

      7da36a4223890501fc0615bdb3f17733

    • SHA1

      1733cefc70d77674576bda99985d2f5f4be2548f

    • SHA256

      13ff98387aa00e52536cdf8f9d62faab11e96e23867039cbecd4cae8400901aa

    • SHA512

      36d3913d43925afb2e1238b253925541643263ff30eb350a86f7f262f0993141292b820e228e9f5179fb702c46f68b0b48237c9fe3f0b579c43389a8f289d486

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.