Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

df7f924bc4...84.exe

windows7-x64

10

df7f924bc4...84.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df7f924bc4e2b8c06c58c81bb3c787f065dadf17cacce9dc51c5432c8d3e7d84

  • Size

    256KB

  • Sample

    221020-md3r8ahcek

  • MD5

    a0974491d06a1f058b1e3176724f5d32

  • SHA1

    2b50fe4bb4df8247f3a5083c0f86f8424a63e03e

  • SHA256

    df7f924bc4e2b8c06c58c81bb3c787f065dadf17cacce9dc51c5432c8d3e7d84

  • SHA512

    83bc0be99fe96b10109a0520db012c7fd6fcaab7baecadb0e7aad5b18f6699855e53d8f8e48ef0f0a79ce58dff64aea0139c9c5825766a14010296d33a17c0ce

  • SSDEEP

    6144:BiGDh4jLt4NVcWgyGELwXiS8T+bbhn7aRjS5ZgXbG:AGWntWyD1LiS8lS5Zi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      df7f924bc4e2b8c06c58c81bb3c787f065dadf17cacce9dc51c5432c8d3e7d84

    • Size

      256KB

    • MD5

      a0974491d06a1f058b1e3176724f5d32

    • SHA1

      2b50fe4bb4df8247f3a5083c0f86f8424a63e03e

    • SHA256

      df7f924bc4e2b8c06c58c81bb3c787f065dadf17cacce9dc51c5432c8d3e7d84

    • SHA512

      83bc0be99fe96b10109a0520db012c7fd6fcaab7baecadb0e7aad5b18f6699855e53d8f8e48ef0f0a79ce58dff64aea0139c9c5825766a14010296d33a17c0ce

    • SSDEEP

      6144:BiGDh4jLt4NVcWgyGELwXiS8T+bbhn7aRjS5ZgXbG:AGWntWyD1LiS8lS5Zi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks