Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

a0c5e39b6b...61.exe

windows7-x64

10

a0c5e39b6b...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0c5e39b6bafe3193e0b3e8787b32b3d5d2de6b5f34e5df7830d1c729d192761

  • Size

    1.0MB

  • Sample

    221002-jcfphsdha8

  • MD5

    6dfbfd3efd9eb2a1b9f39b161191c6e0

  • SHA1

    320d332f817b4d770c672021dae574ee82a95c4d

  • SHA256

    a0c5e39b6bafe3193e0b3e8787b32b3d5d2de6b5f34e5df7830d1c729d192761

  • SHA512

    90ef1fb5d192bade98e58aa38294a110cd0561f39ffda222ed23198b68acf310fc3ab62a2d265e2be644e0532ab1dddc5b532da252690b7f1dadefd3e15b5c01

  • SSDEEP

    12288:g72bn2Yp72bn2Yr72bn2Yp72bn2YC72bn2Yp72bn2Yw:g72zF72zf72zF72zm72zF72zs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a0c5e39b6bafe3193e0b3e8787b32b3d5d2de6b5f34e5df7830d1c729d192761

    • Size

      1.0MB

    • MD5

      6dfbfd3efd9eb2a1b9f39b161191c6e0

    • SHA1

      320d332f817b4d770c672021dae574ee82a95c4d

    • SHA256

      a0c5e39b6bafe3193e0b3e8787b32b3d5d2de6b5f34e5df7830d1c729d192761

    • SHA512

      90ef1fb5d192bade98e58aa38294a110cd0561f39ffda222ed23198b68acf310fc3ab62a2d265e2be644e0532ab1dddc5b532da252690b7f1dadefd3e15b5c01

    • SSDEEP

      12288:g72bn2Yp72bn2Yr72bn2Yp72bn2YC72bn2Yp72bn2Yw:g72zF72zf72zF72zm72zF72zs

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks