Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8780070f0c...5a.exe

windows7-x64

10

8780070f0c...5a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8780070f0ca0a6207d0976a12438197b02b21f6cb364fda3008868a8bf55615a

  • Size

    220KB

  • Sample

    221004-ec6hqabchn

  • MD5

    4ae9f80012ff950f2104d3adaaa1b7a9

  • SHA1

    cad05d048dc2aea3a4809a5095232376618161d5

  • SHA256

    8780070f0ca0a6207d0976a12438197b02b21f6cb364fda3008868a8bf55615a

  • SHA512

    d760fbe7bed7e2190780b207a83773de7866ce1c78e29cdee855f841f8f56274d3c7c33ff99c4cd9cd60d711686544e1fe93b8cdbe3adb00a74185d78753f3d3

  • SSDEEP

    6144:4ccT35pTsOW3VMGDXihPMzT/VT9skJIUJD4ER3+2SwbyJXYcqgXawXfTr4v7en6q:45TvTsOW3VMGJT9skJIUJD4ER3+2Swbg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8780070f0ca0a6207d0976a12438197b02b21f6cb364fda3008868a8bf55615a

    • Size

      220KB

    • MD5

      4ae9f80012ff950f2104d3adaaa1b7a9

    • SHA1

      cad05d048dc2aea3a4809a5095232376618161d5

    • SHA256

      8780070f0ca0a6207d0976a12438197b02b21f6cb364fda3008868a8bf55615a

    • SHA512

      d760fbe7bed7e2190780b207a83773de7866ce1c78e29cdee855f841f8f56274d3c7c33ff99c4cd9cd60d711686544e1fe93b8cdbe3adb00a74185d78753f3d3

    • SSDEEP

      6144:4ccT35pTsOW3VMGDXihPMzT/VT9skJIUJD4ER3+2SwbyJXYcqgXawXfTr4v7en6q:45TvTsOW3VMGJT9skJIUJD4ER3+2Swbg

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks