Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

e4f435f89c...c6.exe

windows7-x64

10

e4f435f89c...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4f435f89c8f30517757f2ac1e5574fc935ade1d88ddeb1172ec171f23972ac6

  • Size

    80KB

  • Sample

    221004-hj6zlsgdep

  • MD5

    57b596f966d37a7019a6e79b0c4f0cf0

  • SHA1

    817697aab73898929c1c2b477bbb209073a84860

  • SHA256

    e4f435f89c8f30517757f2ac1e5574fc935ade1d88ddeb1172ec171f23972ac6

  • SHA512

    1f008980387b7789acb87e619cd9985f0f8d9d627ed05bcd1162716aa14f48bec19552aa3361bdd5ba387a24968912c5591f58978a258668abd3015ea7989179

  • SSDEEP

    1536:Mstdgm616Lti8n42APNR2dcScLcPcxeTanuUHWO0s3xxNMq39gk34iSqR:AG4PNEdcScLcPcfnuk0yR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e4f435f89c8f30517757f2ac1e5574fc935ade1d88ddeb1172ec171f23972ac6

    • Size

      80KB

    • MD5

      57b596f966d37a7019a6e79b0c4f0cf0

    • SHA1

      817697aab73898929c1c2b477bbb209073a84860

    • SHA256

      e4f435f89c8f30517757f2ac1e5574fc935ade1d88ddeb1172ec171f23972ac6

    • SHA512

      1f008980387b7789acb87e619cd9985f0f8d9d627ed05bcd1162716aa14f48bec19552aa3361bdd5ba387a24968912c5591f58978a258668abd3015ea7989179

    • SSDEEP

      1536:Mstdgm616Lti8n42APNR2dcScLcPcxeTanuUHWO0s3xxNMq39gk34iSqR:AG4PNEdcScLcPcfnuk0yR

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks