Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

d5a7726661...d3.exe

windows7-x64

8

d5a7726661...d3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5a77266619fc321b2e372658670b6eec2d8a034df5f0428edde19ffb72557d3

  • Size

    20KB

  • Sample

    221121-szp15sbb4s

  • MD5

    27f664c41e5fabba8557cc84126d2fb0

  • SHA1

    85b06995d141d337ad12f6023937075626d57aea

  • SHA256

    d5a77266619fc321b2e372658670b6eec2d8a034df5f0428edde19ffb72557d3

  • SHA512

    da4547c477963137c19f2c0643c0a8927239c3dc62f1aca61c04e96b59e8b10327dddc880e805f706545cbd29e9fb18158ab92f10611478fb6b473b334280bb3

  • SSDEEP

    192:1l5E3krTuntKy0peHDfCpHfBv+I4QwXt9V+jqu0G5KDJBIq:1M3PnQoHDCpHf4I4Qwdc0G5KDJSq

Score
8/10

Malware Config

Targets

    • Target

      d5a77266619fc321b2e372658670b6eec2d8a034df5f0428edde19ffb72557d3

    • Size

      20KB

    • MD5

      27f664c41e5fabba8557cc84126d2fb0

    • SHA1

      85b06995d141d337ad12f6023937075626d57aea

    • SHA256

      d5a77266619fc321b2e372658670b6eec2d8a034df5f0428edde19ffb72557d3

    • SHA512

      da4547c477963137c19f2c0643c0a8927239c3dc62f1aca61c04e96b59e8b10327dddc880e805f706545cbd29e9fb18158ab92f10611478fb6b473b334280bb3

    • SSDEEP

      192:1l5E3krTuntKy0peHDfCpHfBv+I4QwXt9V+jqu0G5KDJBIq:1M3PnQoHDCpHf4I4Qwdc0G5KDJSq

    Score
    8/10

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks