Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

sd.exe

windows7-x64

8

sd.exe

windows10-2004-x64

8

Resubmissions

10/10/2022, 12:26

221010-pl6vysbgc6 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sd.exe

  • Size

    529KB

  • Sample

    221010-pl6vysbgc6

  • MD5

    08aaa7f4e2c1278c0e9b06ce4e6c217d

  • SHA1

    2cb4b4fb1ec8305ef03e1802f56be22b12379a0c

  • SHA256

    8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f

  • SHA512

    7a40ae329864cddf73acbc6435e7d8e977c44c2a91a71f8aaaf7a52d2d898b5392f0c7b3e4d9d2b34dcd55437c1ab68bd0d40480440eb600c0a606b53e179e03

  • SSDEEP

    6144:yNYl/n0+1JZi7al4y3FMLv2fVvmcMnNtEmdOJ3jsdp5K/GmdNpK5IL03:yNYl/0Val4GVed7RdOZczCK2LC

Score
8/10

Malware Config

Targets

    • Target

      sd.exe

    • Size

      529KB

    • MD5

      08aaa7f4e2c1278c0e9b06ce4e6c217d

    • SHA1

      2cb4b4fb1ec8305ef03e1802f56be22b12379a0c

    • SHA256

      8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f

    • SHA512

      7a40ae329864cddf73acbc6435e7d8e977c44c2a91a71f8aaaf7a52d2d898b5392f0c7b3e4d9d2b34dcd55437c1ab68bd0d40480440eb600c0a606b53e179e03

    • SSDEEP

      6144:yNYl/n0+1JZi7al4y3FMLv2fVvmcMnNtEmdOJ3jsdp5K/GmdNpK5IL03:yNYl/0Val4GVed7RdOZczCK2LC

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks