Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

967e46e510...a8.exe

windows7-x64

8

967e46e510...a8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    967e46e510ca3cc841111bdcfcd85301fdbf9e6062f02bfac3f6d10ef0d618a8

  • Size

    270KB

  • Sample

    221030-ryh1rseee7

  • MD5

    a2f50300046583a2666dcfa114fe13d0

  • SHA1

    d13e61e45c8c69406e3c534b1c94615d836df746

  • SHA256

    967e46e510ca3cc841111bdcfcd85301fdbf9e6062f02bfac3f6d10ef0d618a8

  • SHA512

    e734e61da907b6ce374bafd1f38f8c605ad6434b59c1503d3813524fc1e113cf979ce051fe72379b34c0ead615067acb629f4bb7010e853ab5daef9f4d6d8654

  • SSDEEP

    3072:4xRDEbFUwUDxNQccrLPdKMCtuy4CWQ1NORruIJ9FqZWL+5bAhBwQnR+jkau6Pk:CDEpUdOPdKMCMrC1+RzFqftAznIjkn7

Score
10/10
modiloaderevasionpersistence

Malware Config

Targets

    • Target

      967e46e510ca3cc841111bdcfcd85301fdbf9e6062f02bfac3f6d10ef0d618a8

    • Size

      270KB

    • MD5

      a2f50300046583a2666dcfa114fe13d0

    • SHA1

      d13e61e45c8c69406e3c534b1c94615d836df746

    • SHA256

      967e46e510ca3cc841111bdcfcd85301fdbf9e6062f02bfac3f6d10ef0d618a8

    • SHA512

      e734e61da907b6ce374bafd1f38f8c605ad6434b59c1503d3813524fc1e113cf979ce051fe72379b34c0ead615067acb629f4bb7010e853ab5daef9f4d6d8654

    • SSDEEP

      3072:4xRDEbFUwUDxNQccrLPdKMCtuy4CWQ1NORruIJ9FqZWL+5bAhBwQnR+jkau6Pk:CDEpUdOPdKMCMrC1+RzFqftAznIjkn7

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks