Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

80918d0b25...a4.exe

windows7-x64

8

80918d0b25...a4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80918d0b25d465737c170e144962392b22a8acaa9c6b2e9f2f36d6657a24a8a4

  • Size

    169KB

  • Sample

    221020-1zmvsageaj

  • MD5

    4ca49fcf691cfc82432c64c6704ba471

  • SHA1

    886f8c3be8e607005542c814a276dae939862a94

  • SHA256

    80918d0b25d465737c170e144962392b22a8acaa9c6b2e9f2f36d6657a24a8a4

  • SHA512

    89e7d8975e09a47fd4f81f59098954a14725aae99c49645b7040cced7a00f515ebc2e11d87c76102ea52b81edbaaa08bd72f7a4b08dd7a7d1b917c406731d701

  • SSDEEP

    3072:JBAp5XhKpN4eOyVTGfhEClj8jTk+0hveFB/WmS0lKV0FwM:MbXE9OiTGfhEClq9ROmS5Y

Score
8/10
discovery

Malware Config

Targets

    • Target

      80918d0b25d465737c170e144962392b22a8acaa9c6b2e9f2f36d6657a24a8a4

    • Size

      169KB

    • MD5

      4ca49fcf691cfc82432c64c6704ba471

    • SHA1

      886f8c3be8e607005542c814a276dae939862a94

    • SHA256

      80918d0b25d465737c170e144962392b22a8acaa9c6b2e9f2f36d6657a24a8a4

    • SHA512

      89e7d8975e09a47fd4f81f59098954a14725aae99c49645b7040cced7a00f515ebc2e11d87c76102ea52b81edbaaa08bd72f7a4b08dd7a7d1b917c406731d701

    • SSDEEP

      3072:JBAp5XhKpN4eOyVTGfhEClj8jTk+0hveFB/WmS0lKV0FwM:MbXE9OiTGfhEClq9ROmS5Y

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks