Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

684aaeeae1...93.exe

windows7-x64

10

684aaeeae1...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    684aaeeae13c0048f24c46f2e53f3e540d7d8948a481ac88bb0ddca616cf7d93

  • Size

    272KB

  • Sample

    221028-wyn91aaaa9

  • MD5

    07e673bf5e721bca511625d5cee79af0

  • SHA1

    3d55685f908df8ca9e95124c0e44266b4cc99260

  • SHA256

    684aaeeae13c0048f24c46f2e53f3e540d7d8948a481ac88bb0ddca616cf7d93

  • SHA512

    eab3cf4af28101acbc2efefba303172aef7b7338e5726a1f3bb236c0cae5f8a6e711ec67dbaa0b5983066709aa506748b2b92dab7fbba69c538984dadd204859

  • SSDEEP

    3072:e4a9gmss0FvbVJznCRcz/hVFA9MSs/PLLj+Qm4U3YwgTeA3yrU:bvvbfznH7O9G/PLLxU3YwgTM

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      684aaeeae13c0048f24c46f2e53f3e540d7d8948a481ac88bb0ddca616cf7d93

    • Size

      272KB

    • MD5

      07e673bf5e721bca511625d5cee79af0

    • SHA1

      3d55685f908df8ca9e95124c0e44266b4cc99260

    • SHA256

      684aaeeae13c0048f24c46f2e53f3e540d7d8948a481ac88bb0ddca616cf7d93

    • SHA512

      eab3cf4af28101acbc2efefba303172aef7b7338e5726a1f3bb236c0cae5f8a6e711ec67dbaa0b5983066709aa506748b2b92dab7fbba69c538984dadd204859

    • SSDEEP

      3072:e4a9gmss0FvbVJznCRcz/hVFA9MSs/PLLj+Qm4U3YwgTeA3yrU:bvvbfznH7O9G/PLLxU3YwgTM

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks