Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

678fd707f3...78.exe

windows7-x64

10

678fd707f3...78.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    678fd707f3ad6810410147102799cf69f30850599d97580474451b1066015f78

  • Size

    136KB

  • Sample

    221030-gq3p4afhen

  • MD5

    a279dbfbfa243f061dd117d030b405d0

  • SHA1

    c963fc9c0a6fdcf0c565d3aeaf176ae19a369238

  • SHA256

    678fd707f3ad6810410147102799cf69f30850599d97580474451b1066015f78

  • SHA512

    3ca7a5fbb1d730a6dc03b8c31002461e360b9147d587b3563e1a5b960a5d214b6f4dfa74fe3cdb48831f2dd5dd6e115bb5325681cb56aa42575f2846ec25efe2

  • SSDEEP

    3072:Qy1IFRRG/J9t538E6tZqAwZh5dKzio3CfNynXp5ucK1FaOaB0W+A:H1G9kAwWTSW+A

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      678fd707f3ad6810410147102799cf69f30850599d97580474451b1066015f78

    • Size

      136KB

    • MD5

      a279dbfbfa243f061dd117d030b405d0

    • SHA1

      c963fc9c0a6fdcf0c565d3aeaf176ae19a369238

    • SHA256

      678fd707f3ad6810410147102799cf69f30850599d97580474451b1066015f78

    • SHA512

      3ca7a5fbb1d730a6dc03b8c31002461e360b9147d587b3563e1a5b960a5d214b6f4dfa74fe3cdb48831f2dd5dd6e115bb5325681cb56aa42575f2846ec25efe2

    • SSDEEP

      3072:Qy1IFRRG/J9t538E6tZqAwZh5dKzio3CfNynXp5ucK1FaOaB0W+A:H1G9kAwWTSW+A

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks