Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

305ea922b2...c7.exe

windows7-x64

10

305ea922b2...c7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    305ea922b2475eb07330d9146ca1c146b6c10f215954f766d215150f4faf49c7

  • Size

    224KB

  • Sample

    221020-md97ashcfj

  • MD5

    96938249636719838fc3f1cea0ff4980

  • SHA1

    1abf9a6aadf3300879609a30f99e489ce853d7a5

  • SHA256

    305ea922b2475eb07330d9146ca1c146b6c10f215954f766d215150f4faf49c7

  • SHA512

    6efce1ebc808ebab639a26b5ec4b83e5dbafb2ef75f1b0f1bddafe47f545f4fcf4e2784ed925f7aa2406c137c3bd0a003689dfab158244caeb770db8226b25ea

  • SSDEEP

    6144:fbFwzWQ7YVLKv+1DvopAytt0Sh4sO0rTbJsjBv23xuUS71Xm4mqWKnvmb7/D26D3:zFw8VLKv+1DvopAyD0Sy0rTbyjw3x/SE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      305ea922b2475eb07330d9146ca1c146b6c10f215954f766d215150f4faf49c7

    • Size

      224KB

    • MD5

      96938249636719838fc3f1cea0ff4980

    • SHA1

      1abf9a6aadf3300879609a30f99e489ce853d7a5

    • SHA256

      305ea922b2475eb07330d9146ca1c146b6c10f215954f766d215150f4faf49c7

    • SHA512

      6efce1ebc808ebab639a26b5ec4b83e5dbafb2ef75f1b0f1bddafe47f545f4fcf4e2784ed925f7aa2406c137c3bd0a003689dfab158244caeb770db8226b25ea

    • SSDEEP

      6144:fbFwzWQ7YVLKv+1DvopAytt0Sh4sO0rTbJsjBv23xuUS71Xm4mqWKnvmb7/D26D3:zFw8VLKv+1DvopAyD0Sy0rTbyjw3x/SE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks