Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

79d61b801a...3b.exe

windows7-x64

10

79d61b801a...3b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79d61b801a51448382f5c030639c242b6e9d22157ccdaa51cf5790469a242b3b

  • Size

    192KB

  • Sample

    221030-yhpa6shcaq

  • MD5

    916e6119881bff5e67a0610e2b6c0040

  • SHA1

    0b867372e9e0b1a2d3cf2e4c5eb7d4f4c84402b0

  • SHA256

    79d61b801a51448382f5c030639c242b6e9d22157ccdaa51cf5790469a242b3b

  • SHA512

    43fffdf0d5e368d1adde1d7e75d13bc9fb8febc3626e3523f1f6f44a1899e287816a564ff4f28e7654903a72853ce2688b49f29784a06b86f60e28f33f8842fa

  • SSDEEP

    3072:4dYLIxdvKuGr7t5qCRFSoRQg/yqOV9Kf5L/SV5qK:NiVCRFSoRQlVC5L/hK

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      79d61b801a51448382f5c030639c242b6e9d22157ccdaa51cf5790469a242b3b

    • Size

      192KB

    • MD5

      916e6119881bff5e67a0610e2b6c0040

    • SHA1

      0b867372e9e0b1a2d3cf2e4c5eb7d4f4c84402b0

    • SHA256

      79d61b801a51448382f5c030639c242b6e9d22157ccdaa51cf5790469a242b3b

    • SHA512

      43fffdf0d5e368d1adde1d7e75d13bc9fb8febc3626e3523f1f6f44a1899e287816a564ff4f28e7654903a72853ce2688b49f29784a06b86f60e28f33f8842fa

    • SSDEEP

      3072:4dYLIxdvKuGr7t5qCRFSoRQg/yqOV9Kf5L/SV5qK:NiVCRFSoRQlVC5L/hK

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks