Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

25bf87f1e5...0d.exe

windows7-x64

10

25bf87f1e5...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25bf87f1e557c891cdb6ff97f67e9a76eb9fb9b09277ec0e3443c4df7b43550d

  • Size

    176KB

  • Sample

    220919-dw5j4aaahp

  • MD5

    89372e07625642abca9605c561263531

  • SHA1

    19366790f3ade208b92f3620fcc80d4f037ee956

  • SHA256

    25bf87f1e557c891cdb6ff97f67e9a76eb9fb9b09277ec0e3443c4df7b43550d

  • SHA512

    a70718b93128b708c9c07523b3f23e597d6151d9b24009ccb599c4844f1d084475333fa2416a60f95d96b9b0ac4c1645f39ae864cffb8720131a0648012c89f8

  • SSDEEP

    3072:Dnol91MwYT9M8WAXKdEOdO6Knvmb7/D26YPjvOuc7WWYKlEE2js11lUyGevo:rY91MwY9JWAXKqeKnvmb7/D26YrvOucE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      25bf87f1e557c891cdb6ff97f67e9a76eb9fb9b09277ec0e3443c4df7b43550d

    • Size

      176KB

    • MD5

      89372e07625642abca9605c561263531

    • SHA1

      19366790f3ade208b92f3620fcc80d4f037ee956

    • SHA256

      25bf87f1e557c891cdb6ff97f67e9a76eb9fb9b09277ec0e3443c4df7b43550d

    • SHA512

      a70718b93128b708c9c07523b3f23e597d6151d9b24009ccb599c4844f1d084475333fa2416a60f95d96b9b0ac4c1645f39ae864cffb8720131a0648012c89f8

    • SSDEEP

      3072:Dnol91MwYT9M8WAXKdEOdO6Knvmb7/D26YPjvOuc7WWYKlEE2js11lUyGevo:rY91MwY9JWAXKqeKnvmb7/D26YrvOucE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks