Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

ab17f2a44a...cd.exe

windows7-x64

10

ab17f2a44a...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab17f2a44a77816d0eac81af06a90e932e7c218abfa9bf90fc5e46e73413c2cd

  • Size

    228KB

  • Sample

    221129-dkhaeshh56

  • MD5

    0992c3e3193a7b277db93c85cafb37f2

  • SHA1

    96c4aa47f41bfaff7073de976594239d44ac7b0a

  • SHA256

    ab17f2a44a77816d0eac81af06a90e932e7c218abfa9bf90fc5e46e73413c2cd

  • SHA512

    97dc2f654b3f1cae84057a60c3baf8dad2f5fff416d8b9b69496d84009bca03fd6a7365a918a8b113d702f0aaf2d5e6fa38ea6c372aa02f38e76f9bc4e7c1de0

  • SSDEEP

    6144:qmW3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/SSr:qm0PhAmZIH+Su

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ab17f2a44a77816d0eac81af06a90e932e7c218abfa9bf90fc5e46e73413c2cd

    • Size

      228KB

    • MD5

      0992c3e3193a7b277db93c85cafb37f2

    • SHA1

      96c4aa47f41bfaff7073de976594239d44ac7b0a

    • SHA256

      ab17f2a44a77816d0eac81af06a90e932e7c218abfa9bf90fc5e46e73413c2cd

    • SHA512

      97dc2f654b3f1cae84057a60c3baf8dad2f5fff416d8b9b69496d84009bca03fd6a7365a918a8b113d702f0aaf2d5e6fa38ea6c372aa02f38e76f9bc4e7c1de0

    • SSDEEP

      6144:qmW3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/SSr:qm0PhAmZIH+Su

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks