Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

86267fab2e...1c.exe

windows7-x64

8

86267fab2e...1c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86267fab2eae4584710de2dfe6f6d84d0ae61f2beb9d3952e940b3d14876171c

  • Size

    167KB

  • Sample

    221003-rhgg1aaeep

  • MD5

    41ad48f02009727cfcc4c8ec129646d4

  • SHA1

    2d3fefacd4b7b6e6a74a30f9b1c28358d0eb31bf

  • SHA256

    86267fab2eae4584710de2dfe6f6d84d0ae61f2beb9d3952e940b3d14876171c

  • SHA512

    09ab980707bed990d139ab673c893daa8469020ca0bf8d59c1d0f2975142c1df7301b10aef5d079506069969b0d33ea09a40bd07a2ce21e8a98e26681e66cf23

  • SSDEEP

    3072:AJSQuQ1QyQcQ+TT/T6EutTBfMkvDoHo6Uf1RD5bdu6y7F9bN2ocp7:oSbC9LjT/eEutTB/D6o6KDbdu6y7FlNY

Score
8/10

Malware Config

Targets

    • Target

      86267fab2eae4584710de2dfe6f6d84d0ae61f2beb9d3952e940b3d14876171c

    • Size

      167KB

    • MD5

      41ad48f02009727cfcc4c8ec129646d4

    • SHA1

      2d3fefacd4b7b6e6a74a30f9b1c28358d0eb31bf

    • SHA256

      86267fab2eae4584710de2dfe6f6d84d0ae61f2beb9d3952e940b3d14876171c

    • SHA512

      09ab980707bed990d139ab673c893daa8469020ca0bf8d59c1d0f2975142c1df7301b10aef5d079506069969b0d33ea09a40bd07a2ce21e8a98e26681e66cf23

    • SSDEEP

      3072:AJSQuQ1QyQcQ+TT/T6EutTBfMkvDoHo6Uf1RD5bdu6y7F9bN2ocp7:oSbC9LjT/eEutTB/D6o6KDbdu6y7FlNY

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks