Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

a114b5d66e...0b.exe

windows7-x64

10

a114b5d66e...0b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a114b5d66ed374216e50ff20644dd019871e8caa2d4a18a9f61c91fc4c2b1a0b

  • Size

    196KB

  • Sample

    221030-gqvdqafhdn

  • MD5

    93aec714e00f2aec35d5918f99a96e42

  • SHA1

    53e977d960b5976ca69649f834e733e1e6bff1d2

  • SHA256

    a114b5d66ed374216e50ff20644dd019871e8caa2d4a18a9f61c91fc4c2b1a0b

  • SHA512

    df457844a6320b36c285821eb17df8c1a88c08c813e83831b53448a3231365762c2dc0be7afe4b840f514690841f6c1b76d65c662f71011f1eb3e76af6f7f0a9

  • SSDEEP

    6144:t3ayGHLLU6Pr7FXlbWc3PuV/rvGXUf39GZjJ21OhCJiviq2YWDppF7eP:t3+Pr7FXlbWc3PuV/r+XUf39GZjJ21Or

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a114b5d66ed374216e50ff20644dd019871e8caa2d4a18a9f61c91fc4c2b1a0b

    • Size

      196KB

    • MD5

      93aec714e00f2aec35d5918f99a96e42

    • SHA1

      53e977d960b5976ca69649f834e733e1e6bff1d2

    • SHA256

      a114b5d66ed374216e50ff20644dd019871e8caa2d4a18a9f61c91fc4c2b1a0b

    • SHA512

      df457844a6320b36c285821eb17df8c1a88c08c813e83831b53448a3231365762c2dc0be7afe4b840f514690841f6c1b76d65c662f71011f1eb3e76af6f7f0a9

    • SSDEEP

      6144:t3ayGHLLU6Pr7FXlbWc3PuV/rvGXUf39GZjJ21OhCJiviq2YWDppF7eP:t3+Pr7FXlbWc3PuV/r+XUf39GZjJ21Or

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks