Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d2703ace4f...b4.exe

windows7-x64

10

d2703ace4f...b4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2703ace4f8000bd9c7c322db5ab99c6358e5e3db0f6156710407079f20bceb4

  • Size

    184KB

  • Sample

    221029-xr55lsbca3

  • MD5

    84a6f085d72c992bf7b0266c33699a30

  • SHA1

    aa0fad8b2e9e8785339d256f37f19e88aed4da2f

  • SHA256

    d2703ace4f8000bd9c7c322db5ab99c6358e5e3db0f6156710407079f20bceb4

  • SHA512

    9e5b3ccb718cec66f7d2e780f47dce5c8e253073101a284045266a71ffdfa795f5b99e8a47312d7a6e0e2de5c60474fddd03a3d6594bedc905be761e0563b911

  • SSDEEP

    3072:cDGXZ6yu7o897rl2Y4HpRSQ8nsl8Koay6Vs68:9zulF8HpRpAKoahVsZ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d2703ace4f8000bd9c7c322db5ab99c6358e5e3db0f6156710407079f20bceb4

    • Size

      184KB

    • MD5

      84a6f085d72c992bf7b0266c33699a30

    • SHA1

      aa0fad8b2e9e8785339d256f37f19e88aed4da2f

    • SHA256

      d2703ace4f8000bd9c7c322db5ab99c6358e5e3db0f6156710407079f20bceb4

    • SHA512

      9e5b3ccb718cec66f7d2e780f47dce5c8e253073101a284045266a71ffdfa795f5b99e8a47312d7a6e0e2de5c60474fddd03a3d6594bedc905be761e0563b911

    • SSDEEP

      3072:cDGXZ6yu7o897rl2Y4HpRSQ8nsl8Koay6Vs68:9zulF8HpRpAKoahVsZ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks