Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

fc7b352383...31.exe

windows7-x64

10

fc7b352383...31.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc7b352383a275db00a4ba2f52f66b449019f412d9dcdcda91d6069ef4f40d31

  • Size

    336KB

  • Sample

    221011-ys1f7acchn

  • MD5

    773df99210aaf6ed1fe883e8dd2ab170

  • SHA1

    8ee8317dcbbf9662db6509e270a7bdb0dd91f3e4

  • SHA256

    fc7b352383a275db00a4ba2f52f66b449019f412d9dcdcda91d6069ef4f40d31

  • SHA512

    29ba37d9722670a26964166a12903b29609f9d8edf9c96503546733bfa6f784da65a691d40a9eae170d9ec7b9b26cfe6f1b7f5bc89bc3c5b572340d0a62731cb

  • SSDEEP

    6144:XDNxXC2WGk1Y3nmQcuyKx5DKEJrwavj9+dU5S5Nn:Tu2WGk1Y3nmQcjKvWEJK5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fc7b352383a275db00a4ba2f52f66b449019f412d9dcdcda91d6069ef4f40d31

    • Size

      336KB

    • MD5

      773df99210aaf6ed1fe883e8dd2ab170

    • SHA1

      8ee8317dcbbf9662db6509e270a7bdb0dd91f3e4

    • SHA256

      fc7b352383a275db00a4ba2f52f66b449019f412d9dcdcda91d6069ef4f40d31

    • SHA512

      29ba37d9722670a26964166a12903b29609f9d8edf9c96503546733bfa6f784da65a691d40a9eae170d9ec7b9b26cfe6f1b7f5bc89bc3c5b572340d0a62731cb

    • SSDEEP

      6144:XDNxXC2WGk1Y3nmQcuyKx5DKEJrwavj9+dU5S5Nn:Tu2WGk1Y3nmQcjKvWEJK5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks