Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

143f8d7508...ce.exe

windows7-x64

10

143f8d7508...ce.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    143f8d750828e35e5082870d554abfb6af206c0877be45a9532b4549093cbdce

  • Size

    176KB

  • Sample

    221021-byt52aeghq

  • MD5

    4a706dca84eb3a623620f97b6e81af60

  • SHA1

    256d17d54de2fd8fb255d256d1e3cae95669a9fe

  • SHA256

    143f8d750828e35e5082870d554abfb6af206c0877be45a9532b4549093cbdce

  • SHA512

    54a1732882643960172eaf8de30df354954457b1c4c2bf1da7ef43a7b0746e81293fba8ae205d5398bf1ce7e5942c9c102f6fb53340a9c3fb5b4e002777925e7

  • SSDEEP

    3072:TRBNSIcEGROnFggPmCXMNKiqMdMZZZZWMkIJFW:HgvtEMNIMdHYy

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      143f8d750828e35e5082870d554abfb6af206c0877be45a9532b4549093cbdce

    • Size

      176KB

    • MD5

      4a706dca84eb3a623620f97b6e81af60

    • SHA1

      256d17d54de2fd8fb255d256d1e3cae95669a9fe

    • SHA256

      143f8d750828e35e5082870d554abfb6af206c0877be45a9532b4549093cbdce

    • SHA512

      54a1732882643960172eaf8de30df354954457b1c4c2bf1da7ef43a7b0746e81293fba8ae205d5398bf1ce7e5942c9c102f6fb53340a9c3fb5b4e002777925e7

    • SSDEEP

      3072:TRBNSIcEGROnFggPmCXMNKiqMdMZZZZWMkIJFW:HgvtEMNIMdHYy

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks