Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

039f3f00e5...36.exe

windows7-x64

10

039f3f00e5...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    039f3f00e5922158eb9778e5477f4e74354bc87d8d1027d2e08ef97fa62eb436

  • Size

    276KB

  • Sample

    221030-ynmdrsgea7

  • MD5

    90c17b27ee224075d35101dfd7c6a960

  • SHA1

    7960df78627fde4256f8e0b482b8d137359085f8

  • SHA256

    039f3f00e5922158eb9778e5477f4e74354bc87d8d1027d2e08ef97fa62eb436

  • SHA512

    a44c1fff241531d79d074e2877f08f9a7f03fdc5dc3f8b04c954bc40c41034713261e0563a7356636a3a071197b45d61e065a3edf48e4b92e5a740249df02eba

  • SSDEEP

    1536:5vC89v1DLFfHk/X6tnfknHzQ0X0WytH0uL2JPWNoSfrVrBrerdrMfUVx6YBQsPm4:Q+aisPm8HuQM+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      039f3f00e5922158eb9778e5477f4e74354bc87d8d1027d2e08ef97fa62eb436

    • Size

      276KB

    • MD5

      90c17b27ee224075d35101dfd7c6a960

    • SHA1

      7960df78627fde4256f8e0b482b8d137359085f8

    • SHA256

      039f3f00e5922158eb9778e5477f4e74354bc87d8d1027d2e08ef97fa62eb436

    • SHA512

      a44c1fff241531d79d074e2877f08f9a7f03fdc5dc3f8b04c954bc40c41034713261e0563a7356636a3a071197b45d61e065a3edf48e4b92e5a740249df02eba

    • SSDEEP

      1536:5vC89v1DLFfHk/X6tnfknHzQ0X0WytH0uL2JPWNoSfrVrBrerdrMfUVx6YBQsPm4:Q+aisPm8HuQM+

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks