Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1c1331d4f7...a2.exe

windows7-x64

10

1c1331d4f7...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c1331d4f7122041383d341dc300c79a4537cfd5e06b25afb44aa1da478148a2

  • Size

    264KB

  • Sample

    221002-s2hpvacgg2

  • MD5

    0528c726bebd1ff87bb504017304bd85

  • SHA1

    f02b71c66fabd6dc0c3220b797f41ddf3220fa14

  • SHA256

    1c1331d4f7122041383d341dc300c79a4537cfd5e06b25afb44aa1da478148a2

  • SHA512

    413ebd7b27994d6be0dc2d09203eb38708a6b506376a0e39074699972402136444fd567a9da15996c69807d217fb13b1b9063251129440c155a200d776e701aa

  • SSDEEP

    3072:bwwQcqsOr//2IDyG2pfr4GNLzECcKIvMBSYWunCvPQiwhjXH1WkaBx5/lvnjLYa7:swQ3sOrn9Ic6OLynWunzXH1W9rt

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1c1331d4f7122041383d341dc300c79a4537cfd5e06b25afb44aa1da478148a2

    • Size

      264KB

    • MD5

      0528c726bebd1ff87bb504017304bd85

    • SHA1

      f02b71c66fabd6dc0c3220b797f41ddf3220fa14

    • SHA256

      1c1331d4f7122041383d341dc300c79a4537cfd5e06b25afb44aa1da478148a2

    • SHA512

      413ebd7b27994d6be0dc2d09203eb38708a6b506376a0e39074699972402136444fd567a9da15996c69807d217fb13b1b9063251129440c155a200d776e701aa

    • SSDEEP

      3072:bwwQcqsOr//2IDyG2pfr4GNLzECcKIvMBSYWunCvPQiwhjXH1WkaBx5/lvnjLYa7:swQ3sOrn9Ic6OLynWunzXH1W9rt

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks