Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

581c3ff98e...e2.exe

windows7-x64

10

581c3ff98e...e2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    581c3ff98e057911dd93160b0463f2df708bb78f7a46cd7177ccc7c557e996e2

  • Size

    248KB

  • Sample

    221020-2grlpahee3

  • MD5

    4f79437f9c6df0b3bd8f204e22db1f48

  • SHA1

    65b4365750e5a78ea72bff59d571013b0b7c880f

  • SHA256

    581c3ff98e057911dd93160b0463f2df708bb78f7a46cd7177ccc7c557e996e2

  • SHA512

    1413bb7b051f57197dfb904511aba6bea1e48014637c3e5b442198c6bfe7c02d3ef10d8ffb6d7f3f66972886e4f4e3dc8f443ba8f2b50525c03b5bd081ca5bf5

  • SSDEEP

    6144:TVdVQUyyUf9dgAVRKlqBiErIsKnPmb7/jWal+FfAje+5/RxoOsutOSD/uP39RWyJ:TVmyUf9DRKlqgErIsKnPmb7/jWa1e+5T

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      581c3ff98e057911dd93160b0463f2df708bb78f7a46cd7177ccc7c557e996e2

    • Size

      248KB

    • MD5

      4f79437f9c6df0b3bd8f204e22db1f48

    • SHA1

      65b4365750e5a78ea72bff59d571013b0b7c880f

    • SHA256

      581c3ff98e057911dd93160b0463f2df708bb78f7a46cd7177ccc7c557e996e2

    • SHA512

      1413bb7b051f57197dfb904511aba6bea1e48014637c3e5b442198c6bfe7c02d3ef10d8ffb6d7f3f66972886e4f4e3dc8f443ba8f2b50525c03b5bd081ca5bf5

    • SSDEEP

      6144:TVdVQUyyUf9dgAVRKlqBiErIsKnPmb7/jWal+FfAje+5/RxoOsutOSD/uP39RWyJ:TVmyUf9DRKlqgErIsKnPmb7/jWa1e+5T

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks