Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

af986068a4...0e.exe

windows7-x64

10

af986068a4...0e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af986068a479d7756881ae42da0cd76931fb724c6bf42042bf55ac557d23d40e

  • Size

    192KB

  • Sample

    221030-t5e9kaace2

  • MD5

    81c054cfa3d5967c0e3a9882d52dfe67

  • SHA1

    28826e6635a4cdfe62e422044a78b8833a3999e0

  • SHA256

    af986068a479d7756881ae42da0cd76931fb724c6bf42042bf55ac557d23d40e

  • SHA512

    ea54625a0be3674d885f2b16a2c6032127aebf4075021488210a9c7bafcb6dde9d0a8d5e3d40caa7c86a5575358b1eedc809b02048cb2eae90afa506323a3a3b

  • SSDEEP

    1536:hgHABQruHlTTPRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/dJqi/7:C2QraTjRi4itiSHXzp3uYTPLJOhD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      af986068a479d7756881ae42da0cd76931fb724c6bf42042bf55ac557d23d40e

    • Size

      192KB

    • MD5

      81c054cfa3d5967c0e3a9882d52dfe67

    • SHA1

      28826e6635a4cdfe62e422044a78b8833a3999e0

    • SHA256

      af986068a479d7756881ae42da0cd76931fb724c6bf42042bf55ac557d23d40e

    • SHA512

      ea54625a0be3674d885f2b16a2c6032127aebf4075021488210a9c7bafcb6dde9d0a8d5e3d40caa7c86a5575358b1eedc809b02048cb2eae90afa506323a3a3b

    • SSDEEP

      1536:hgHABQruHlTTPRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/dJqi/7:C2QraTjRi4itiSHXzp3uYTPLJOhD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks