Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

f2a7a9703a...c8.exe

windows7-x64

10

f2a7a9703a...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2a7a9703a21528d2344e988a27b3f3fea1ab9441b0a9d79610967a10f8140c8

  • Size

    212KB

  • Sample

    221020-14l42sgffk

  • MD5

    47730daf6383efe2e7fb42120d35e419

  • SHA1

    00b136c08ecd00e2e2d17ae622cda904e0fccc9a

  • SHA256

    f2a7a9703a21528d2344e988a27b3f3fea1ab9441b0a9d79610967a10f8140c8

  • SHA512

    46bec11d2b24c2f9844e9160b1516006a9f67c2c9a7629b8312903702f1be3dbfc7627a6d8ca2787a66547080be2c543e873e5bcd31652a4be1cb96544514476

  • SSDEEP

    6144:4CKlFwzWQyO8J0bqihew3b7KvfCBnn78MDxG6oRKnvmb7/D26NhHmpfXJNRYK:nKlFwb8J0egew3bevfY78MDxG6oRKnvP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f2a7a9703a21528d2344e988a27b3f3fea1ab9441b0a9d79610967a10f8140c8

    • Size

      212KB

    • MD5

      47730daf6383efe2e7fb42120d35e419

    • SHA1

      00b136c08ecd00e2e2d17ae622cda904e0fccc9a

    • SHA256

      f2a7a9703a21528d2344e988a27b3f3fea1ab9441b0a9d79610967a10f8140c8

    • SHA512

      46bec11d2b24c2f9844e9160b1516006a9f67c2c9a7629b8312903702f1be3dbfc7627a6d8ca2787a66547080be2c543e873e5bcd31652a4be1cb96544514476

    • SSDEEP

      6144:4CKlFwzWQyO8J0bqihew3b7KvfCBnn78MDxG6oRKnvmb7/D26NhHmpfXJNRYK:nKlFwb8J0egew3bevfY78MDxG6oRKnvP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks