Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

e316869f8a...01.exe

windows7-x64

9

e316869f8a...01.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e316869f8a0197ba487a84e0aa9c3becdc240d780c6cfe555243b32725ab7401

  • Size

    512KB

  • Sample

    221003-b4q1kaceen

  • MD5

    7aa159c1f6ca5d3b7ffc90f80252ecb0

  • SHA1

    3ba42d692a48dd7756aee6b8bd619fcccb8a21cf

  • SHA256

    e316869f8a0197ba487a84e0aa9c3becdc240d780c6cfe555243b32725ab7401

  • SHA512

    fdb0e7449997e66c0f070f1bffeb4db77849d244ab715d8ff90a52d7ba56de8129d28f6c751168b70aaf68e8465d8ea391e8b504c6d74136d6eb8f440609e5bf

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4P:0+h9OY70z+warul3E4P

Score
9/10
evasion

Malware Config

Targets

    • Target

      e316869f8a0197ba487a84e0aa9c3becdc240d780c6cfe555243b32725ab7401

    • Size

      512KB

    • MD5

      7aa159c1f6ca5d3b7ffc90f80252ecb0

    • SHA1

      3ba42d692a48dd7756aee6b8bd619fcccb8a21cf

    • SHA256

      e316869f8a0197ba487a84e0aa9c3becdc240d780c6cfe555243b32725ab7401

    • SHA512

      fdb0e7449997e66c0f070f1bffeb4db77849d244ab715d8ff90a52d7ba56de8129d28f6c751168b70aaf68e8465d8ea391e8b504c6d74136d6eb8f440609e5bf

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4P:0+h9OY70z+warul3E4P

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks