Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

679982e9a4...71.exe

windows7-x64

10

679982e9a4...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    679982e9a41edf6fbe8fdbf3e6389c4a9cb17d8468cd41781b17ce0358802971

  • Size

    216KB

  • Sample

    221003-h4ljeachd6

  • MD5

    5db2b8d02401888b9df41a65dd8d5f40

  • SHA1

    eb0daeb3e2d42c6b6c741040ff33ebb4e287e35c

  • SHA256

    679982e9a41edf6fbe8fdbf3e6389c4a9cb17d8468cd41781b17ce0358802971

  • SHA512

    85e8d2965ab4e3e1f2df8fcae8015afc8fb4fa2a912cbb5dc3e697efb1c15de1633216d5ec2bf7a2035789eab3aa784782629146652efe0356d33f2a3a865ab9

  • SSDEEP

    1536:REXK/64ybvG50BeQ+bpuHe305XrudpySAumJ30h+d4D7YJXMQUCJNwUfQ7zDkQ4m:yqWbOAneu1ukuIXMQjfxFlXZztjNX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      679982e9a41edf6fbe8fdbf3e6389c4a9cb17d8468cd41781b17ce0358802971

    • Size

      216KB

    • MD5

      5db2b8d02401888b9df41a65dd8d5f40

    • SHA1

      eb0daeb3e2d42c6b6c741040ff33ebb4e287e35c

    • SHA256

      679982e9a41edf6fbe8fdbf3e6389c4a9cb17d8468cd41781b17ce0358802971

    • SHA512

      85e8d2965ab4e3e1f2df8fcae8015afc8fb4fa2a912cbb5dc3e697efb1c15de1633216d5ec2bf7a2035789eab3aa784782629146652efe0356d33f2a3a865ab9

    • SSDEEP

      1536:REXK/64ybvG50BeQ+bpuHe305XrudpySAumJ30h+d4D7YJXMQUCJNwUfQ7zDkQ4m:yqWbOAneu1ukuIXMQjfxFlXZztjNX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks