Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1e91764f12...04.exe

windows7-x64

8

1e91764f12...04.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904

  • Size

    20KB

  • Sample

    221012-rgyd5aege7

  • MD5

    65e20fe33e32e5bbfce06725da9f1390

  • SHA1

    7a8e41de13760f158edac9045d6cf64036ecafea

  • SHA256

    1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904

  • SHA512

    4f6c9758364541dfd362c69424c0b9242ddf4137a474615a3648100588b9127931eb5b302697d22f30189c0960757932f3d5cad164f73f346ff5dcf2541b33f7

  • SSDEEP

    192:4/bROG+bO5r+C+isnpHfB7FhO8C0lzWvI4QwFt9V+jqCNa5KDJBaV:4L+q5r+PpHfXhUkKvI4QwjQNa5KDJq

Score
8/10

Malware Config

Targets

    • Target

      1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904

    • Size

      20KB

    • MD5

      65e20fe33e32e5bbfce06725da9f1390

    • SHA1

      7a8e41de13760f158edac9045d6cf64036ecafea

    • SHA256

      1e91764f12fe4f3f71f0fa500ee3353c7734886ce34672e7e0f67b590db01904

    • SHA512

      4f6c9758364541dfd362c69424c0b9242ddf4137a474615a3648100588b9127931eb5b302697d22f30189c0960757932f3d5cad164f73f346ff5dcf2541b33f7

    • SSDEEP

      192:4/bROG+bO5r+C+isnpHfB7FhO8C0lzWvI4QwFt9V+jqCNa5KDJBaV:4L+q5r+PpHfXhUkKvI4QwjQNa5KDJq

    Score
    8/10

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks