Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

e38c1231ef...5e.exe

windows7-x64

10

e38c1231ef...5e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e38c1231ef310d2099a9774019171e984fed567d4b37aedc2688451717185d5e

  • Size

    304KB

  • Sample

    221011-yvtrescdhl

  • MD5

    6a4c946040114016c1503789e51ec950

  • SHA1

    8600e14a70535cf2504f134fdf623dea094c3e49

  • SHA256

    e38c1231ef310d2099a9774019171e984fed567d4b37aedc2688451717185d5e

  • SHA512

    499aefe714e5f050be88b4a1a57f55f3a558f52173579c1dd952c125a741ad49d7fe4e8cecbb26fed471191b024fd73b1d63c6739082da5dc961df264dc72443

  • SSDEEP

    3072:JaPvzZRFjFBbVJsnCRcC3xo8ozYH/LSsB4pAnNnfwo7A3usYQCASCPepFq:JaP7ZLfsnHQIz9AnNno9rCAfPepF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e38c1231ef310d2099a9774019171e984fed567d4b37aedc2688451717185d5e

    • Size

      304KB

    • MD5

      6a4c946040114016c1503789e51ec950

    • SHA1

      8600e14a70535cf2504f134fdf623dea094c3e49

    • SHA256

      e38c1231ef310d2099a9774019171e984fed567d4b37aedc2688451717185d5e

    • SHA512

      499aefe714e5f050be88b4a1a57f55f3a558f52173579c1dd952c125a741ad49d7fe4e8cecbb26fed471191b024fd73b1d63c6739082da5dc961df264dc72443

    • SSDEEP

      3072:JaPvzZRFjFBbVJsnCRcC3xo8ozYH/LSsB4pAnNnfwo7A3usYQCASCPepFq:JaP7ZLfsnHQIz9AnNno9rCAfPepF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks