Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

f2441dac87...d6.exe

windows7-x64

10

f2441dac87...d6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2441dac87237f355fbfa0474df013f2264b254ff7f2145a93bfb1855ea4e8d6

  • Size

    220KB

  • Sample

    221002-aab4waeagn

  • MD5

    6f32497dd814e6c7596db04ee661734b

  • SHA1

    35a0a3ad81e09386cf6e954e71226dc49c1b6cb2

  • SHA256

    f2441dac87237f355fbfa0474df013f2264b254ff7f2145a93bfb1855ea4e8d6

  • SHA512

    a9fc068f652dacb13038608b4bc187c1e0d5f3760252758f777f16464f0ba9d0fb28fd1312a37869675a6fc1b0fa63eb06b2aa6f641acbc34f5a80c3a79dc473

  • SSDEEP

    1536:rC7dASR5csJawoIZsh0CF+sKE0C1rZL4H0c/7wHeLxjaimtAbe79WCyiHCUXR6Tk:xaMOFCsv/CL0jaQaWCyiHCx1ps40

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f2441dac87237f355fbfa0474df013f2264b254ff7f2145a93bfb1855ea4e8d6

    • Size

      220KB

    • MD5

      6f32497dd814e6c7596db04ee661734b

    • SHA1

      35a0a3ad81e09386cf6e954e71226dc49c1b6cb2

    • SHA256

      f2441dac87237f355fbfa0474df013f2264b254ff7f2145a93bfb1855ea4e8d6

    • SHA512

      a9fc068f652dacb13038608b4bc187c1e0d5f3760252758f777f16464f0ba9d0fb28fd1312a37869675a6fc1b0fa63eb06b2aa6f641acbc34f5a80c3a79dc473

    • SSDEEP

      1536:rC7dASR5csJawoIZsh0CF+sKE0C1rZL4H0c/7wHeLxjaimtAbe79WCyiHCUXR6Tk:xaMOFCsv/CL0jaQaWCyiHCx1ps40

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks