Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

fa6796a144...de.exe

windows7-x64

10

fa6796a144...de.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa6796a144baa096092ec1d01ffc192ab0c7480721f9c683405b00e9f2052bde

  • Size

    212KB

  • Sample

    221019-p7blyahccr

  • MD5

    910839cb6b172870dcf2e6f91b573f19

  • SHA1

    e681db75bd71c4c4a028c68b97409bd21fc24be4

  • SHA256

    fa6796a144baa096092ec1d01ffc192ab0c7480721f9c683405b00e9f2052bde

  • SHA512

    37ca95e3b75f57925d79f6a5d994e138771768eaee782f9c9d918f64c041517f8e832257a4c16b2e9882e8b86de123844747d5ebd8fe6d0b9af7ebeebbb5084e

  • SSDEEP

    1536:Gx0ZFRldoIXG/CRYlI4cd9Lv2PElgWzNoN274B/K51ptaHElfTczpyFar2/AgAIK:+WR/oI1qGp+aNoN2N0YAcXHi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fa6796a144baa096092ec1d01ffc192ab0c7480721f9c683405b00e9f2052bde

    • Size

      212KB

    • MD5

      910839cb6b172870dcf2e6f91b573f19

    • SHA1

      e681db75bd71c4c4a028c68b97409bd21fc24be4

    • SHA256

      fa6796a144baa096092ec1d01ffc192ab0c7480721f9c683405b00e9f2052bde

    • SHA512

      37ca95e3b75f57925d79f6a5d994e138771768eaee782f9c9d918f64c041517f8e832257a4c16b2e9882e8b86de123844747d5ebd8fe6d0b9af7ebeebbb5084e

    • SSDEEP

      1536:Gx0ZFRldoIXG/CRYlI4cd9Lv2PElgWzNoN274B/K51ptaHElfTczpyFar2/AgAIK:+WR/oI1qGp+aNoN2N0YAcXHi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks