Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

c9a2337447...d1.exe

windows7-x64

10

c9a2337447...d1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9a23374473a464d9008c9e9a0006faaa4c9d09e22f2e472935d32c4d95ee9d1

  • Size

    228KB

  • Sample

    221002-aywhesfcaq

  • MD5

    64f71d48982c65a907dc40199cf1557a

  • SHA1

    7ec5ac5ff1caf8d3b1f7a348c069353aad41dcd6

  • SHA256

    c9a23374473a464d9008c9e9a0006faaa4c9d09e22f2e472935d32c4d95ee9d1

  • SHA512

    aa2fca0d979ae3bac8f7beec2ebc89709ef5b7906eaaa622c5528565e7e6afd5ad57a0914e7ad4d39ce87719db0fbdb23d9a8ef6442d53f5e90a34972afb68d7

  • SSDEEP

    3072:6gEty/i5UYJVFV5eDQHsuvNA05Vqtto24VmcZMUuXi46qndrAxIbYpWv:oy+3JrLeDQHr+uV0to24VmlUuSvqdl

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c9a23374473a464d9008c9e9a0006faaa4c9d09e22f2e472935d32c4d95ee9d1

    • Size

      228KB

    • MD5

      64f71d48982c65a907dc40199cf1557a

    • SHA1

      7ec5ac5ff1caf8d3b1f7a348c069353aad41dcd6

    • SHA256

      c9a23374473a464d9008c9e9a0006faaa4c9d09e22f2e472935d32c4d95ee9d1

    • SHA512

      aa2fca0d979ae3bac8f7beec2ebc89709ef5b7906eaaa622c5528565e7e6afd5ad57a0914e7ad4d39ce87719db0fbdb23d9a8ef6442d53f5e90a34972afb68d7

    • SSDEEP

      3072:6gEty/i5UYJVFV5eDQHsuvNA05Vqtto24VmcZMUuXi46qndrAxIbYpWv:oy+3JrLeDQHr+uV0to24VmlUuSvqdl

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks