Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

e3a3d6d6d6...85.exe

windows7-x64

10

e3a3d6d6d6...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3a3d6d6d6d26b331742903c3590746d5b12ca6ddc97727443fb898598945985

  • Size

    68KB

  • Sample

    221127-vp3klahc9s

  • MD5

    62a85b798c999abbddb2ab0fbe4c382d

  • SHA1

    119eb1790b771ad29349ddbeb0973db317cb159a

  • SHA256

    e3a3d6d6d6d26b331742903c3590746d5b12ca6ddc97727443fb898598945985

  • SHA512

    32bcd74025a847a95fd98bd75b3ac1a9d72d490f1bac84891e536925a92164dccc823166e33c47c091faa86a2b02e8553efb40160b9fab23b8f885dce76cda08

  • SSDEEP

    768:pchliTdGIAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:WhIxrAcqOK3qowgnt1d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e3a3d6d6d6d26b331742903c3590746d5b12ca6ddc97727443fb898598945985

    • Size

      68KB

    • MD5

      62a85b798c999abbddb2ab0fbe4c382d

    • SHA1

      119eb1790b771ad29349ddbeb0973db317cb159a

    • SHA256

      e3a3d6d6d6d26b331742903c3590746d5b12ca6ddc97727443fb898598945985

    • SHA512

      32bcd74025a847a95fd98bd75b3ac1a9d72d490f1bac84891e536925a92164dccc823166e33c47c091faa86a2b02e8553efb40160b9fab23b8f885dce76cda08

    • SSDEEP

      768:pchliTdGIAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:WhIxrAcqOK3qowgnt1d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks