Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

file.exe

windows7-x64

8

file.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43fb5f6b4b39a15c89d6178f8c0c85f155a2ebf78734ff3ee9a5b0b09e605828

  • Size

    157KB

  • Sample

    221127-x5a7dscf55

  • MD5

    e3a06f386b9e1aed46721228204cc747

  • SHA1

    4d4b7a8fa06c0bd6eea1854df9632f805c7ab53e

  • SHA256

    43fb5f6b4b39a15c89d6178f8c0c85f155a2ebf78734ff3ee9a5b0b09e605828

  • SHA512

    a9c60b0661195deacb31b214ab333e8cbfcafaa58177f05df1eb5d0340ce0867e5cdee664f59f2fd4396f166316c1d8c6e448726936849eed22b21b4de775a84

  • SSDEEP

    3072:iMGb4m6Wnn5hdaVHtKi35ti9rgytOATBECuhkLAXPl5Gs58CSaHnRc2+EuY2v8/Z:e4jg+pHsOAtECusAX95zkaHaR0/Z

Score
8/10
discovery

Malware Config

Targets

    • Target

      file.exe

    • Size

      242KB

    • MD5

      b8069d23a93b5f1e67e2603d12b80057

    • SHA1

      43d7b58527d7d09655b2f3f38347d6263aea5306

    • SHA256

      341914f20b5ea442c4edc1e0dd28a303629d734cabd1058f26c8d2c8def76412

    • SHA512

      2d8674f144cf56a4cea346014cfa446ff11cc5846fabca9975ac06a7959b099f4a514913892deb7aabe0a978d08519f423c955905d6693acee0a9242fcdfb7c3

    • SSDEEP

      6144:yZXBsWqsE/Ao+mv8Qv0LVmwq4FU0nN876sahikaHam0/X:0XmwRo+mv8QD4+0N46lIP0/

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks