Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

4e703dd145...22.exe

windows7-x64

10

4e703dd145...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e703dd145715def9cc64ee25fb9d225575d773374f0628e0775cf7b31a20222

  • Size

    84KB

  • Sample

    221020-fx4ejafdhq

  • MD5

    8163478b2a291ced0fb19a17071cfa80

  • SHA1

    7a98cb8d02ee5464f3fddf2a420ca225591abb9e

  • SHA256

    4e703dd145715def9cc64ee25fb9d225575d773374f0628e0775cf7b31a20222

  • SHA512

    d7f54d22759bde84c8e3bbb97fe38c82f49931fd4ec6ace9c352101e92cd70ed0bd751c5d5451c78333b89a424c85d9e30811bcd38caca03b6f8f1cc61850e6a

  • SSDEEP

    1536:osmdgG5S16Lti8n42APNR2dcScLcPcxeTanuUHWOms3xxNMq39gk34iS5v:l04PNEdcScLcPcfnuS0hv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4e703dd145715def9cc64ee25fb9d225575d773374f0628e0775cf7b31a20222

    • Size

      84KB

    • MD5

      8163478b2a291ced0fb19a17071cfa80

    • SHA1

      7a98cb8d02ee5464f3fddf2a420ca225591abb9e

    • SHA256

      4e703dd145715def9cc64ee25fb9d225575d773374f0628e0775cf7b31a20222

    • SHA512

      d7f54d22759bde84c8e3bbb97fe38c82f49931fd4ec6ace9c352101e92cd70ed0bd751c5d5451c78333b89a424c85d9e30811bcd38caca03b6f8f1cc61850e6a

    • SSDEEP

      1536:osmdgG5S16Lti8n42APNR2dcScLcPcxeTanuUHWOms3xxNMq39gk34iS5v:l04PNEdcScLcPcfnuS0hv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks