Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

370d2fb999...89.exe

windows7-x64

10

370d2fb999...89.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    370d2fb999efc14ec741ed52fdf56a993726862bbb06c099773a5dc09d062f89

  • Size

    127KB

  • Sample

    221003-j6wmtsega2

  • MD5

    014d1a783d28a633bd596585e85c6eaa

  • SHA1

    c8091d110bd978dd4cd120e9a8e6a36090bc8fb3

  • SHA256

    370d2fb999efc14ec741ed52fdf56a993726862bbb06c099773a5dc09d062f89

  • SHA512

    cec5803170e5b2da001eba689648c8cc0b27508f80ca5834a34054cc8364ffca8c2b7e5cd1b60298f8b574eb14f94c83218a97406250563e590f46d018b3aaf5

  • SSDEEP

    3072:YYe5uwx7W/a7ju63Lq1OsYGSjf9jKj0Zy+VIP2jwSoSLk61PjqrSMAVuVH6qJn6Q:YL5VI/a7nOn7j7T

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      370d2fb999efc14ec741ed52fdf56a993726862bbb06c099773a5dc09d062f89

    • Size

      127KB

    • MD5

      014d1a783d28a633bd596585e85c6eaa

    • SHA1

      c8091d110bd978dd4cd120e9a8e6a36090bc8fb3

    • SHA256

      370d2fb999efc14ec741ed52fdf56a993726862bbb06c099773a5dc09d062f89

    • SHA512

      cec5803170e5b2da001eba689648c8cc0b27508f80ca5834a34054cc8364ffca8c2b7e5cd1b60298f8b574eb14f94c83218a97406250563e590f46d018b3aaf5

    • SSDEEP

      3072:YYe5uwx7W/a7ju63Lq1OsYGSjf9jKj0Zy+VIP2jwSoSLk61PjqrSMAVuVH6qJn6Q:YL5VI/a7nOn7j7T

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks