Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3fa62e4512...93.exe

windows7-x64

10

3fa62e4512...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fa62e45125ec4c58b4fe8d2160ae7769d910fcc0a4dd8db2f1338bdd5f5e393

  • Size

    60KB

  • Sample

    221030-aczb7acgc7

  • MD5

    a26b60b6a12b9fdab754447c30bb2720

  • SHA1

    4ba29302fe635b961ec160a1ebc175793484e2a7

  • SHA256

    3fa62e45125ec4c58b4fe8d2160ae7769d910fcc0a4dd8db2f1338bdd5f5e393

  • SHA512

    9bcae91d8e1dc789c3bf2f2dbfc72fc38c72a4d2a09038c972d802f393c77c57f0374614965c0bf217a0680d0269555da8bbae620d8992ade5df025087101468

  • SSDEEP

    768:BQefh+S2YZtTIZb05Lm3dSUMUWMUX2TtFIkNcSFIkid+69KOeM1gYn6cg4gspB6:5h+S2YnZKkQ1WlkSeTZNMmJ0CwJW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3fa62e45125ec4c58b4fe8d2160ae7769d910fcc0a4dd8db2f1338bdd5f5e393

    • Size

      60KB

    • MD5

      a26b60b6a12b9fdab754447c30bb2720

    • SHA1

      4ba29302fe635b961ec160a1ebc175793484e2a7

    • SHA256

      3fa62e45125ec4c58b4fe8d2160ae7769d910fcc0a4dd8db2f1338bdd5f5e393

    • SHA512

      9bcae91d8e1dc789c3bf2f2dbfc72fc38c72a4d2a09038c972d802f393c77c57f0374614965c0bf217a0680d0269555da8bbae620d8992ade5df025087101468

    • SSDEEP

      768:BQefh+S2YZtTIZb05Lm3dSUMUWMUX2TtFIkNcSFIkid+69KOeM1gYn6cg4gspB6:5h+S2YnZKkQ1WlkSeTZNMmJ0CwJW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks