Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

25f9c5de66...99.exe

windows7-x64

8

25f9c5de66...99.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25f9c5de666dcab498ee3374d04e2676f8042efbdabac9a3dc22b0f9d8178599

  • Size

    105KB

  • Sample

    221030-qmskdsdcar

  • MD5

    92b8044298e64dafbe500f5d8cd54220

  • SHA1

    78a35503cdc9f577bf06c3d2def327efbda62304

  • SHA256

    25f9c5de666dcab498ee3374d04e2676f8042efbdabac9a3dc22b0f9d8178599

  • SHA512

    d654d594ee800d6baf5e79b12a604531f368f79383fcd91c73be12d49da92853be3ce5b151c4d5bfb97d1ba375e5ac01c3f684098adb360cceaec2e1d0e5c0c3

  • SSDEEP

    3072:W7MwMUtk0uAnfaM3wRQqo/h60Vtvolup5hd8:W7Mfs3T6mvolup

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      25f9c5de666dcab498ee3374d04e2676f8042efbdabac9a3dc22b0f9d8178599

    • Size

      105KB

    • MD5

      92b8044298e64dafbe500f5d8cd54220

    • SHA1

      78a35503cdc9f577bf06c3d2def327efbda62304

    • SHA256

      25f9c5de666dcab498ee3374d04e2676f8042efbdabac9a3dc22b0f9d8178599

    • SHA512

      d654d594ee800d6baf5e79b12a604531f368f79383fcd91c73be12d49da92853be3ce5b151c4d5bfb97d1ba375e5ac01c3f684098adb360cceaec2e1d0e5c0c3

    • SSDEEP

      3072:W7MwMUtk0uAnfaM3wRQqo/h60Vtvolup5hd8:W7Mfs3T6mvolup

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks