Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

f0c5d6f3d4...61.exe

windows7-x64

10

f0c5d6f3d4...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0c5d6f3d432b16af28ee8f3d033cd11c7f15efa9b9f4e801f557e183c3eb961

  • Size

    304KB

  • Sample

    221003-c4z4xaceg9

  • MD5

    454d43cd6b87b1506d3ce62357a5a4c0

  • SHA1

    0bc54edc739bd6350180a8fe6ac94a743a1eb401

  • SHA256

    f0c5d6f3d432b16af28ee8f3d033cd11c7f15efa9b9f4e801f557e183c3eb961

  • SHA512

    2013cfdf8910863c09f57151ff05399c292398d18e05811fb44c52b10b147339394c30690cdb01012253572fa81c291f527a33b67caf0f7bcb578b9a63152953

  • SSDEEP

    3072:5aPGzZRFjFBbVJsnCRcC3xo8ozYH/LSsB4pAnNnfwo7A3JkYQCASCPepFq:5aPSZLfsnHQIz9AnNnoOrCAfPepF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f0c5d6f3d432b16af28ee8f3d033cd11c7f15efa9b9f4e801f557e183c3eb961

    • Size

      304KB

    • MD5

      454d43cd6b87b1506d3ce62357a5a4c0

    • SHA1

      0bc54edc739bd6350180a8fe6ac94a743a1eb401

    • SHA256

      f0c5d6f3d432b16af28ee8f3d033cd11c7f15efa9b9f4e801f557e183c3eb961

    • SHA512

      2013cfdf8910863c09f57151ff05399c292398d18e05811fb44c52b10b147339394c30690cdb01012253572fa81c291f527a33b67caf0f7bcb578b9a63152953

    • SSDEEP

      3072:5aPGzZRFjFBbVJsnCRcC3xo8ozYH/LSsB4pAnNnfwo7A3JkYQCASCPepFq:5aPSZLfsnHQIz9AnNnoOrCAfPepF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks