Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

f1aa898dc1...75.exe

windows7-x64

10

f1aa898dc1...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1aa898dc111973fbebadeb998fd113e3cb4f51978a4089dbde5b1e26f7c2575

  • Size

    248KB

  • Sample

    221011-lmw6csgfal

  • MD5

    2a197f169c78498f30421875375cedd0

  • SHA1

    d8187ad227ae581e06934100e40c8c93b24e43ea

  • SHA256

    f1aa898dc111973fbebadeb998fd113e3cb4f51978a4089dbde5b1e26f7c2575

  • SHA512

    0048df4890cee52b91afa93df1dbc6d64434acd7c654b1143890bb2fb4b0867ee660d92c7b43af27465bf8e885b703054f89d1dc426d2c0f7dbe1e175113e732

  • SSDEEP

    6144:9jM5CElofkFWQPtnRneqAKnvmb7/D269fgwMty0e6ndv0DEQ:9o5CLkFfnRnWKnvmb7/D26qndv0DV

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f1aa898dc111973fbebadeb998fd113e3cb4f51978a4089dbde5b1e26f7c2575

    • Size

      248KB

    • MD5

      2a197f169c78498f30421875375cedd0

    • SHA1

      d8187ad227ae581e06934100e40c8c93b24e43ea

    • SHA256

      f1aa898dc111973fbebadeb998fd113e3cb4f51978a4089dbde5b1e26f7c2575

    • SHA512

      0048df4890cee52b91afa93df1dbc6d64434acd7c654b1143890bb2fb4b0867ee660d92c7b43af27465bf8e885b703054f89d1dc426d2c0f7dbe1e175113e732

    • SSDEEP

      6144:9jM5CElofkFWQPtnRneqAKnvmb7/D269fgwMty0e6ndv0DEQ:9o5CLkFfnRnWKnvmb7/D26qndv0DV

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks