Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

f55ed6e0ca...93.exe

windows7-x64

8

f55ed6e0ca...93.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f55ed6e0ca5b439c7b2b1bad94ec6ea639a8932c5cb64d9d9bdaf5f4e5c18b93

  • Size

    3.7MB

  • Sample

    221126-aacqeagc63

  • MD5

    1c8054d7d73121f37440aec3f18f0b31

  • SHA1

    4a5c4f00eeb5ba43a108924e577cf47eb963ca4c

  • SHA256

    f55ed6e0ca5b439c7b2b1bad94ec6ea639a8932c5cb64d9d9bdaf5f4e5c18b93

  • SHA512

    2baa7f62fd68df2daad50edc72a879f95ad6a6fe79639c5b70f88b5d64699d1f90d033aa3c4a840a84e302d0ef6fd535759c2895f698a872fe3989c245ffb2db

  • SSDEEP

    98304:pXbYse0bLs2VNrt5/nLQOBualSyhFKNGpM0WT+4JJ/:RbYrYLfNrbfBdlSyhFVMpl/

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      f55ed6e0ca5b439c7b2b1bad94ec6ea639a8932c5cb64d9d9bdaf5f4e5c18b93

    • Size

      3.7MB

    • MD5

      1c8054d7d73121f37440aec3f18f0b31

    • SHA1

      4a5c4f00eeb5ba43a108924e577cf47eb963ca4c

    • SHA256

      f55ed6e0ca5b439c7b2b1bad94ec6ea639a8932c5cb64d9d9bdaf5f4e5c18b93

    • SHA512

      2baa7f62fd68df2daad50edc72a879f95ad6a6fe79639c5b70f88b5d64699d1f90d033aa3c4a840a84e302d0ef6fd535759c2895f698a872fe3989c245ffb2db

    • SSDEEP

      98304:pXbYse0bLs2VNrt5/nLQOBualSyhFKNGpM0WT+4JJ/:RbYrYLfNrbfBdlSyhFVMpl/

    Score
    8/10
    discoverypersistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks