Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

12964c4fe9...39.exe

windows7-x64

10

12964c4fe9...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12964c4fe9d9955533b823af838535535368d5e5d84952854ade666adc1cdf39

  • Size

    288KB

  • Sample

    221030-amltvadhcq

  • MD5

    9284af880ac3f1351aaa123cb4ffc5dc

  • SHA1

    41ad7fab5fb6b967a0122aed163a01a557286761

  • SHA256

    12964c4fe9d9955533b823af838535535368d5e5d84952854ade666adc1cdf39

  • SHA512

    1a83f591bafa074c3af96b451712979beb73aa58c31432b82f0efc8d32e32a7f3a2582d9678e992a71d5db7349cc14f10a49949b3739c0a4404553d23ac47d24

  • SSDEEP

    6144:4/iJTAN+tytpx96Hg02BCh3FZuhbYaxUG2nIVKUut3:4/iJTfyDxsHg02BCh3FZuhbYaxUG2nB/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      12964c4fe9d9955533b823af838535535368d5e5d84952854ade666adc1cdf39

    • Size

      288KB

    • MD5

      9284af880ac3f1351aaa123cb4ffc5dc

    • SHA1

      41ad7fab5fb6b967a0122aed163a01a557286761

    • SHA256

      12964c4fe9d9955533b823af838535535368d5e5d84952854ade666adc1cdf39

    • SHA512

      1a83f591bafa074c3af96b451712979beb73aa58c31432b82f0efc8d32e32a7f3a2582d9678e992a71d5db7349cc14f10a49949b3739c0a4404553d23ac47d24

    • SSDEEP

      6144:4/iJTAN+tytpx96Hg02BCh3FZuhbYaxUG2nIVKUut3:4/iJTfyDxsHg02BCh3FZuhbYaxUG2nB/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks