Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3e84bb0602...18.exe

windows7-x64

10

3e84bb0602...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e84bb06029faec5697fc76d5f36df940a44863de347e7d1cb3591b4ffa5e418

  • Size

    1007KB

  • Sample

    221001-wsyaqahhd2

  • MD5

    6d7583b7e4389d2bf68fa6b87acff354

  • SHA1

    bbc2c1a129cee26d22ed85fd1ee4b270dd26f96c

  • SHA256

    3e84bb06029faec5697fc76d5f36df940a44863de347e7d1cb3591b4ffa5e418

  • SHA512

    8af2e0c42bf7b9f9c2a49d9c6ea638648ec70101f64747d68028b15556d538335c54c34cf7b295b418e12460c1db8a84205957cd0d5551fc5b1ee9f046f9e860

  • SSDEEP

    6144:a+nglw9ayQv3ahvyn/PU7O0KXgTTSj2ZYIW7lEykhC6H8GY5RzdhIXbO9qsWbbF2:rjS3Yvyn/0TQIW5EykhXG5RzXsqomsqT

Score
10/10
persistence

Malware Config

Targets

    • Target

      3e84bb06029faec5697fc76d5f36df940a44863de347e7d1cb3591b4ffa5e418

    • Size

      1007KB

    • MD5

      6d7583b7e4389d2bf68fa6b87acff354

    • SHA1

      bbc2c1a129cee26d22ed85fd1ee4b270dd26f96c

    • SHA256

      3e84bb06029faec5697fc76d5f36df940a44863de347e7d1cb3591b4ffa5e418

    • SHA512

      8af2e0c42bf7b9f9c2a49d9c6ea638648ec70101f64747d68028b15556d538335c54c34cf7b295b418e12460c1db8a84205957cd0d5551fc5b1ee9f046f9e860

    • SSDEEP

      6144:a+nglw9ayQv3ahvyn/PU7O0KXgTTSj2ZYIW7lEykhC6H8GY5RzdhIXbO9qsWbbF2:rjS3Yvyn/0TQIW5EykhXG5RzXsqomsqT

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks