Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d834108d5e...0d.exe

windows7-x64

10

d834108d5e...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d834108d5e9137cc01d85f3a3a073f1552397165c766daa570d8580e35dcc10d

  • Size

    244KB

  • Sample

    221030-ydlz9afhf8

  • MD5

    918a1f09a7a7965c25e3754a613fcdff

  • SHA1

    6e93ff206b53223ae0a5c6b9b0003503e19bf21f

  • SHA256

    d834108d5e9137cc01d85f3a3a073f1552397165c766daa570d8580e35dcc10d

  • SHA512

    1f2624a5fcf54c4cdf45ac714bec44fbf1347fa8bd941d566b75db9efb15a4a717bbc34593cce0a5242d35512346facfa83ca8e989e1949274a05dbc9cf28d05

  • SSDEEP

    3072:hyY+mN+L1fyLFxoMV3CQw4I5coBBBT+42uxcYxG/4aqosAm+w9l:IYpNBIfBTAu+4aqosAm+wP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d834108d5e9137cc01d85f3a3a073f1552397165c766daa570d8580e35dcc10d

    • Size

      244KB

    • MD5

      918a1f09a7a7965c25e3754a613fcdff

    • SHA1

      6e93ff206b53223ae0a5c6b9b0003503e19bf21f

    • SHA256

      d834108d5e9137cc01d85f3a3a073f1552397165c766daa570d8580e35dcc10d

    • SHA512

      1f2624a5fcf54c4cdf45ac714bec44fbf1347fa8bd941d566b75db9efb15a4a717bbc34593cce0a5242d35512346facfa83ca8e989e1949274a05dbc9cf28d05

    • SSDEEP

      3072:hyY+mN+L1fyLFxoMV3CQw4I5coBBBT+42uxcYxG/4aqosAm+w9l:IYpNBIfBTAu+4aqosAm+wP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks