Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

89a982b999...e2.exe

windows7-x64

10

89a982b999...e2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89a982b999859a72ecc3b20acd6a3f1b0913c0cd857ef1cd9354cacdba1131e2

  • Size

    84KB

  • Sample

    221011-zlvsssdha5

  • MD5

    673232581d1f3b0a9f837972c9755192

  • SHA1

    4715958013d89c50b6fc4387ed847bf36eb90eea

  • SHA256

    89a982b999859a72ecc3b20acd6a3f1b0913c0cd857ef1cd9354cacdba1131e2

  • SHA512

    201d1afbe4e6589880e1d1375efc8505cacd0e32c5bc0f3e8effee899bdf37b499e3386cb027982372da38eeb5a59dd2192be36e1084d48411a2b64a97a87eb7

  • SSDEEP

    1536:vQ8y57bg4htUVGLG/wXJYeUj27dTGHq13i6E:4UVeG/wXJY527Y

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      89a982b999859a72ecc3b20acd6a3f1b0913c0cd857ef1cd9354cacdba1131e2

    • Size

      84KB

    • MD5

      673232581d1f3b0a9f837972c9755192

    • SHA1

      4715958013d89c50b6fc4387ed847bf36eb90eea

    • SHA256

      89a982b999859a72ecc3b20acd6a3f1b0913c0cd857ef1cd9354cacdba1131e2

    • SHA512

      201d1afbe4e6589880e1d1375efc8505cacd0e32c5bc0f3e8effee899bdf37b499e3386cb027982372da38eeb5a59dd2192be36e1084d48411a2b64a97a87eb7

    • SSDEEP

      1536:vQ8y57bg4htUVGLG/wXJYeUj27dTGHq13i6E:4UVeG/wXJY527Y

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks