Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

117a9251cd...96.exe

windows7-x64

10

117a9251cd...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    117a9251cd05fd9d90732646ff99b38c607bc6910bd035a3deb376783f89bc96

  • Size

    120KB

  • Sample

    221001-yj75nsdad5

  • MD5

    75135674e6ea82a548aa442f084b7d12

  • SHA1

    5cbd0a9e78ca6e9e6af86fac131381858b961643

  • SHA256

    117a9251cd05fd9d90732646ff99b38c607bc6910bd035a3deb376783f89bc96

  • SHA512

    eb9ad0ba43e261e4b649183330f08841cbce25f88590a63f95f351b2715a4202eb90f609f07d224ecc1b521160fc8d63e3459f8edd275329f402bc921d86ea9f

  • SSDEEP

    3072:XewtgqDkr13LIaYnoPMhR9HtKI0c5wB8PEX:XIkI13LIn5RxIq5688

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      117a9251cd05fd9d90732646ff99b38c607bc6910bd035a3deb376783f89bc96

    • Size

      120KB

    • MD5

      75135674e6ea82a548aa442f084b7d12

    • SHA1

      5cbd0a9e78ca6e9e6af86fac131381858b961643

    • SHA256

      117a9251cd05fd9d90732646ff99b38c607bc6910bd035a3deb376783f89bc96

    • SHA512

      eb9ad0ba43e261e4b649183330f08841cbce25f88590a63f95f351b2715a4202eb90f609f07d224ecc1b521160fc8d63e3459f8edd275329f402bc921d86ea9f

    • SSDEEP

      3072:XewtgqDkr13LIaYnoPMhR9HtKI0c5wB8PEX:XIkI13LIn5RxIq5688

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks