Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

9410373d9d...84.exe

windows7-x64

10

9410373d9d...84.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9410373d9d3e02eadd31a8f8a4863d9a6cf9e777661c1120d8189ebaa64fa084

  • Size

    180KB

  • Sample

    221106-npsxtscabl

  • MD5

    0486db92b0db9b0b6ba4961df2c71a4a

  • SHA1

    7ce0f1520463dfff69978313fe7cd2f85f5c6cb2

  • SHA256

    9410373d9d3e02eadd31a8f8a4863d9a6cf9e777661c1120d8189ebaa64fa084

  • SHA512

    9550347374827ac9c8c56bdc883503e3c4c292fb97023af78da3cb00279f8708e91ae71d36909aa8bb4591bb1163a9053e051c93cfa358eea1fd0ba2f3f972bd

  • SSDEEP

    3072:6IHpGdYRLoeEdRos/eaqFnqWDb+uTyLDC6s5sSYqGlC6YViZj5HQXZmmJ0yCFio3:VccKPpm2lC6YViZj5HQXZmmJ0yCF9BxW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9410373d9d3e02eadd31a8f8a4863d9a6cf9e777661c1120d8189ebaa64fa084

    • Size

      180KB

    • MD5

      0486db92b0db9b0b6ba4961df2c71a4a

    • SHA1

      7ce0f1520463dfff69978313fe7cd2f85f5c6cb2

    • SHA256

      9410373d9d3e02eadd31a8f8a4863d9a6cf9e777661c1120d8189ebaa64fa084

    • SHA512

      9550347374827ac9c8c56bdc883503e3c4c292fb97023af78da3cb00279f8708e91ae71d36909aa8bb4591bb1163a9053e051c93cfa358eea1fd0ba2f3f972bd

    • SSDEEP

      3072:6IHpGdYRLoeEdRos/eaqFnqWDb+uTyLDC6s5sSYqGlC6YViZj5HQXZmmJ0yCFio3:VccKPpm2lC6YViZj5HQXZmmJ0yCF9BxW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks