Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7434eb532f...53.exe

windows7-x64

10

7434eb532f...53.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7434eb532f8c3f05cf62a84aaedb3390087182185d6af5dff3d573860cf2e953

  • Size

    196KB

  • Sample

    221020-sn73ksbda9

  • MD5

    96235112d9b87ce6504649893603f74e

  • SHA1

    3a74ca5411be4430aa6fd9f6d100684b498b46d7

  • SHA256

    7434eb532f8c3f05cf62a84aaedb3390087182185d6af5dff3d573860cf2e953

  • SHA512

    b4cd1da0d9e43817ec1516ebd57ddcf38cfb7428595967167bd94d849375c666b35802bf943fe5e42e28e166c81ed26c318e167927418a91a65af2a0bdbf5a67

  • SSDEEP

    6144:W3alGHqU6Pr7FXlbWc3PuV/rvGXUf39GZjJ21OhCJiviq2YWDppQ7J:W3+Pr7FXlbWc3PuV/r+XUf39GZjJ21Oe

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7434eb532f8c3f05cf62a84aaedb3390087182185d6af5dff3d573860cf2e953

    • Size

      196KB

    • MD5

      96235112d9b87ce6504649893603f74e

    • SHA1

      3a74ca5411be4430aa6fd9f6d100684b498b46d7

    • SHA256

      7434eb532f8c3f05cf62a84aaedb3390087182185d6af5dff3d573860cf2e953

    • SHA512

      b4cd1da0d9e43817ec1516ebd57ddcf38cfb7428595967167bd94d849375c666b35802bf943fe5e42e28e166c81ed26c318e167927418a91a65af2a0bdbf5a67

    • SSDEEP

      6144:W3alGHqU6Pr7FXlbWc3PuV/rvGXUf39GZjJ21OhCJiviq2YWDppQ7J:W3+Pr7FXlbWc3PuV/r+XUf39GZjJ21Oe

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks