Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dccdf574fe...35.exe

windows7-x64

10

dccdf574fe...35.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dccdf574feb4ed14718efd3580da529efdb429f05015e70040bc389e45de0935

  • Size

    96KB

  • Sample

    221014-mcdrpsahek

  • MD5

    7ab167132649ab567173240f880c9085

  • SHA1

    f74628fcbc1716bc5725398d7d5a69940eb37e1e

  • SHA256

    dccdf574feb4ed14718efd3580da529efdb429f05015e70040bc389e45de0935

  • SHA512

    00e6ce662252d4761778e046c4633fd29b5185066f7da50629a31d06136917bcda8788c08bcbe9efae9660dedf4d55d101b8e452da12c7ef757d6af5d3d96a4b

  • SSDEEP

    1536:0bzDchOULMD/2BzqBRpHf8ZyuBs+/PFilZIi6XI:Az8OrD/2B2d8ZyuRAyX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      dccdf574feb4ed14718efd3580da529efdb429f05015e70040bc389e45de0935

    • Size

      96KB

    • MD5

      7ab167132649ab567173240f880c9085

    • SHA1

      f74628fcbc1716bc5725398d7d5a69940eb37e1e

    • SHA256

      dccdf574feb4ed14718efd3580da529efdb429f05015e70040bc389e45de0935

    • SHA512

      00e6ce662252d4761778e046c4633fd29b5185066f7da50629a31d06136917bcda8788c08bcbe9efae9660dedf4d55d101b8e452da12c7ef757d6af5d3d96a4b

    • SSDEEP

      1536:0bzDchOULMD/2BzqBRpHf8ZyuBs+/PFilZIi6XI:Az8OrD/2B2d8ZyuRAyX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks