Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

ab4f46c3b0...42.exe

windows7-x64

10

ab4f46c3b0...42.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab4f46c3b0b4be0938769c3c6d80963a489e162418600104885401f3a2a0c342

  • Size

    292KB

  • Sample

    221020-2nxfhshfgq

  • MD5

    4bc75f183590483bdfc46bd4c8eae5d7

  • SHA1

    bb706d2964c75b3c1138cf6a49c2201dfe45bbbe

  • SHA256

    ab4f46c3b0b4be0938769c3c6d80963a489e162418600104885401f3a2a0c342

  • SHA512

    970cc6320d98c1d5f01eb244c3bda852b9db257d16b85f35fd76960d42390b64e9b0b4033ada041b4598b6c76bde2360812b3c78dcf2b39685e80668af8bf8a7

  • SSDEEP

    6144:AJicd4PXjBZ+oR6Cd+x1DztXtMI3gWgKtEU:hNPzBZzd+x1DztXtMI3g9XU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ab4f46c3b0b4be0938769c3c6d80963a489e162418600104885401f3a2a0c342

    • Size

      292KB

    • MD5

      4bc75f183590483bdfc46bd4c8eae5d7

    • SHA1

      bb706d2964c75b3c1138cf6a49c2201dfe45bbbe

    • SHA256

      ab4f46c3b0b4be0938769c3c6d80963a489e162418600104885401f3a2a0c342

    • SHA512

      970cc6320d98c1d5f01eb244c3bda852b9db257d16b85f35fd76960d42390b64e9b0b4033ada041b4598b6c76bde2360812b3c78dcf2b39685e80668af8bf8a7

    • SSDEEP

      6144:AJicd4PXjBZ+oR6Cd+x1DztXtMI3gWgKtEU:hNPzBZzd+x1DztXtMI3g9XU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks