Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

4a4f0db308...08.exe

windows7-x64

9

4a4f0db308...08.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a4f0db308e275fd903a5ce02f58f2dd8cf9d8324207deb26e84d00d0a870908

  • Size

    512KB

  • Sample

    221128-alswrsef2x

  • MD5

    5f83785b308765dbeddd066df553b7b3

  • SHA1

    0fe34b2300c4242ab5fcee23e0bd8a2e9964ebde

  • SHA256

    4a4f0db308e275fd903a5ce02f58f2dd8cf9d8324207deb26e84d00d0a870908

  • SHA512

    b0de2595fb4631d472413471c3e51d2019f0e89ee0ae826fa1c2239e77042b25d7d2ca250cd121b5bff63cde63ed1034fd38147924adf8b66cf83c2cfc0a58d8

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4I:0+h9OY70z+warul3E4I

Score
9/10
evasion

Malware Config

Targets

    • Target

      4a4f0db308e275fd903a5ce02f58f2dd8cf9d8324207deb26e84d00d0a870908

    • Size

      512KB

    • MD5

      5f83785b308765dbeddd066df553b7b3

    • SHA1

      0fe34b2300c4242ab5fcee23e0bd8a2e9964ebde

    • SHA256

      4a4f0db308e275fd903a5ce02f58f2dd8cf9d8324207deb26e84d00d0a870908

    • SHA512

      b0de2595fb4631d472413471c3e51d2019f0e89ee0ae826fa1c2239e77042b25d7d2ca250cd121b5bff63cde63ed1034fd38147924adf8b66cf83c2cfc0a58d8

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4I:0+h9OY70z+warul3E4I

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks