Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

f363898791...4a.exe

windows7-x64

10

f363898791...4a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f363898791efb1a3cf72da4647a4c049d7ffa20b7f6ad20c8250d0dc8036044a

  • Size

    201KB

  • Sample

    221002-asr8taehhr

  • MD5

    7157891f2ee185ed69df5ed62d4b8607

  • SHA1

    1916e94ebda1e5241548dc8d530b22039ca3cd1c

  • SHA256

    f363898791efb1a3cf72da4647a4c049d7ffa20b7f6ad20c8250d0dc8036044a

  • SHA512

    8c55a1723724828beecc87cc8a6d56e04fddc4323502443c61c64e6ec1093ac01899b9f47371ce1db059d68d403741fa17142376b7ffc37ba1c52fcd8bc1a634

  • SSDEEP

    6144:ht1K/fObT/bGiELOSnkZQxlrUax8NX1v0U9C0IBx5Q3b7aHpI7RVSH5Lv:xK/fObT/bGicnkZQxlrUaKz8pBA3b7aD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f363898791efb1a3cf72da4647a4c049d7ffa20b7f6ad20c8250d0dc8036044a

    • Size

      201KB

    • MD5

      7157891f2ee185ed69df5ed62d4b8607

    • SHA1

      1916e94ebda1e5241548dc8d530b22039ca3cd1c

    • SHA256

      f363898791efb1a3cf72da4647a4c049d7ffa20b7f6ad20c8250d0dc8036044a

    • SHA512

      8c55a1723724828beecc87cc8a6d56e04fddc4323502443c61c64e6ec1093ac01899b9f47371ce1db059d68d403741fa17142376b7ffc37ba1c52fcd8bc1a634

    • SSDEEP

      6144:ht1K/fObT/bGiELOSnkZQxlrUax8NX1v0U9C0IBx5Q3b7aHpI7RVSH5Lv:xK/fObT/bGicnkZQxlrUaKz8pBA3b7aD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks