Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

0f5cdca61d...22.exe

windows7-x64

10

0f5cdca61d...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f5cdca61df03c1f58c3400f929ffd2a80f19fab45776a129736023f8728ad22

  • Size

    224KB

  • Sample

    221002-s1njpscgc7

  • MD5

    3fc55e589cf8984bc00048f247fa807a

  • SHA1

    3bd163ef033c071b2ee701d178006a1f9632bf3f

  • SHA256

    0f5cdca61df03c1f58c3400f929ffd2a80f19fab45776a129736023f8728ad22

  • SHA512

    084b7fd5f42aa5a2dfee1d079772ef5ef9002ce52ead4ad51e4cb02f45e42acecdeadca77e7775fefff17dc9046969b894ce08d38003d42d8988ba959d3cdf15

  • SSDEEP

    3072:LXyqNsMoBuhZVpl2mclbj4Uvx+8ysNOu+2eRcKksU61JkkX39RLrw4ySKUbax2+l:+qN5Fp4LnbmlrZW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0f5cdca61df03c1f58c3400f929ffd2a80f19fab45776a129736023f8728ad22

    • Size

      224KB

    • MD5

      3fc55e589cf8984bc00048f247fa807a

    • SHA1

      3bd163ef033c071b2ee701d178006a1f9632bf3f

    • SHA256

      0f5cdca61df03c1f58c3400f929ffd2a80f19fab45776a129736023f8728ad22

    • SHA512

      084b7fd5f42aa5a2dfee1d079772ef5ef9002ce52ead4ad51e4cb02f45e42acecdeadca77e7775fefff17dc9046969b894ce08d38003d42d8988ba959d3cdf15

    • SSDEEP

      3072:LXyqNsMoBuhZVpl2mclbj4Uvx+8ysNOu+2eRcKksU61JkkX39RLrw4ySKUbax2+l:+qN5Fp4LnbmlrZW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks