Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

Trojan-Ran...er.exe

windows7-x64

8

Trojan-Ran...er.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan-Ransom.Win32.Blocker.jfqf-708a9483a0ded64e0bf39e3698eca4eb3ab681dc13296a0c352ab1b244c288c6

  • Size

    971KB

  • Sample

    221107-hl8k8afcbr

  • MD5

    7d89eba198b02d7060602fde3a1457a0

  • SHA1

    b96fddf85dd0fc210e8df6bbd18cab8b3742c0c4

  • SHA256

    708a9483a0ded64e0bf39e3698eca4eb3ab681dc13296a0c352ab1b244c288c6

  • SHA512

    2d855b4b7f4361128557c79dbca7caab89c9f635027ff9c7c4cb698242b155103aee37443e42bb87e238437b3fa0f1a26ccdf1300edc1b237b452913357b87d9

  • SSDEEP

    24576:6czJqVSFrhjmiE/DlSlPhMFQn7H7z84MMAJyzeV:6cMghSi0EcUDE4mAO

Score
8/10
persistence

Malware Config

Targets

    • Target

      Trojan-Ransom.Win32.Blocker.jfqf-708a9483a0ded64e0bf39e3698eca4eb3ab681dc13296a0c352ab1b244c288c6

    • Size

      971KB

    • MD5

      7d89eba198b02d7060602fde3a1457a0

    • SHA1

      b96fddf85dd0fc210e8df6bbd18cab8b3742c0c4

    • SHA256

      708a9483a0ded64e0bf39e3698eca4eb3ab681dc13296a0c352ab1b244c288c6

    • SHA512

      2d855b4b7f4361128557c79dbca7caab89c9f635027ff9c7c4cb698242b155103aee37443e42bb87e238437b3fa0f1a26ccdf1300edc1b237b452913357b87d9

    • SSDEEP

      24576:6czJqVSFrhjmiE/DlSlPhMFQn7H7z84MMAJyzeV:6cMghSi0EcUDE4mAO

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks