Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

57497d9e31...43.exe

windows7-x64

10

57497d9e31...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57497d9e31c87d24875f9a0223e26f7be27b1cabf745f7e37a13649855a1ba43

  • Size

    192KB

  • Sample

    221002-ahlchsdbh5

  • MD5

    43682b9f05cef3f3f661cb7c760fc498

  • SHA1

    c9d756f3558eb46d490e1b220998e893dd45fe08

  • SHA256

    57497d9e31c87d24875f9a0223e26f7be27b1cabf745f7e37a13649855a1ba43

  • SHA512

    be363bb832f3ebd5225aad2f02ec771b92b978ed38ec7c5834781cf4c5af2343e23b4fabaa59bd782eb49dfd4c651e64d872dcacda8a077aa2b97a5362b9b1e2

  • SSDEEP

    1536:jZcD2OahSaaaaat031AdQWB5kCFrWszRUOHFlQhzyLwVKftfVBiZHAPloFp5A2m3:POGAW3kCFrWsF2eLbqx2XMFs89

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      57497d9e31c87d24875f9a0223e26f7be27b1cabf745f7e37a13649855a1ba43

    • Size

      192KB

    • MD5

      43682b9f05cef3f3f661cb7c760fc498

    • SHA1

      c9d756f3558eb46d490e1b220998e893dd45fe08

    • SHA256

      57497d9e31c87d24875f9a0223e26f7be27b1cabf745f7e37a13649855a1ba43

    • SHA512

      be363bb832f3ebd5225aad2f02ec771b92b978ed38ec7c5834781cf4c5af2343e23b4fabaa59bd782eb49dfd4c651e64d872dcacda8a077aa2b97a5362b9b1e2

    • SSDEEP

      1536:jZcD2OahSaaaaat031AdQWB5kCFrWszRUOHFlQhzyLwVKftfVBiZHAPloFp5A2m3:POGAW3kCFrWsF2eLbqx2XMFs89

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks