Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

2ae89fab0d...24.exe

windows7-x64

10

2ae89fab0d...24.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ae89fab0ddc51b77419da145a7a402eed470dbe8a7667c2a548370aba6da024

  • Size

    228KB

  • Sample

    221129-dkvwhsdd8z

  • MD5

    1eb97d2d7059bf753e453426a4c28c20

  • SHA1

    04bd9737cc8f173a2955b49fdccee742d2e9413d

  • SHA256

    2ae89fab0ddc51b77419da145a7a402eed470dbe8a7667c2a548370aba6da024

  • SHA512

    08388486fee26fb7011a2d0e112e2763c3c327e61472729a10b9b8a0422e7da274e56634da71316e474f092e3578007a50c442c23a58300f57725fe8b3439f13

  • SSDEEP

    6144:Zmua3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/aSd:ZmuoPhAmZIH+aA

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2ae89fab0ddc51b77419da145a7a402eed470dbe8a7667c2a548370aba6da024

    • Size

      228KB

    • MD5

      1eb97d2d7059bf753e453426a4c28c20

    • SHA1

      04bd9737cc8f173a2955b49fdccee742d2e9413d

    • SHA256

      2ae89fab0ddc51b77419da145a7a402eed470dbe8a7667c2a548370aba6da024

    • SHA512

      08388486fee26fb7011a2d0e112e2763c3c327e61472729a10b9b8a0422e7da274e56634da71316e474f092e3578007a50c442c23a58300f57725fe8b3439f13

    • SSDEEP

      6144:Zmua3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/aSd:ZmuoPhAmZIH+aA

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks