Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d3a171705a...5c.exe

windows7-x64

10

d3a171705a...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3a171705a93ebeccb5001ed87e1ceb9925503162d3d0998245b9e74d0b7ac5c

  • Size

    60KB

  • Sample

    221107-zt5yqsbefq

  • MD5

    02ae17b892f6831aab74992efb8c4170

  • SHA1

    95e3cfef7e02af68dcba6f431c09de9b69e62890

  • SHA256

    d3a171705a93ebeccb5001ed87e1ceb9925503162d3d0998245b9e74d0b7ac5c

  • SHA512

    d9a674b2fbf78a42fcc90e7e0b59bad5d0bc4d13628cf671c9d657a7240f47d4745fb197931ae5dfb10062548ba5414b463574bac5d69f846b72f9e633a09afb

  • SSDEEP

    768:C064lSLCxCIHQoU66U0KMXndolsz7NMRQk/0qtF1enbw1o+Qs+N5:WqSLErmU07ndoS7NMVXtF1ow1o+QH

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d3a171705a93ebeccb5001ed87e1ceb9925503162d3d0998245b9e74d0b7ac5c

    • Size

      60KB

    • MD5

      02ae17b892f6831aab74992efb8c4170

    • SHA1

      95e3cfef7e02af68dcba6f431c09de9b69e62890

    • SHA256

      d3a171705a93ebeccb5001ed87e1ceb9925503162d3d0998245b9e74d0b7ac5c

    • SHA512

      d9a674b2fbf78a42fcc90e7e0b59bad5d0bc4d13628cf671c9d657a7240f47d4745fb197931ae5dfb10062548ba5414b463574bac5d69f846b72f9e633a09afb

    • SSDEEP

      768:C064lSLCxCIHQoU66U0KMXndolsz7NMRQk/0qtF1enbw1o+Qs+N5:WqSLErmU07ndoS7NMVXtF1ow1o+QH

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks