Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

a2ca1f29e1...91.exe

windows7-x64

10

a2ca1f29e1...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2ca1f29e154ba98b589967c2ca5fcf5e96f0f3c0e1a6fbe740e0d29b907fa91

  • Size

    140KB

  • Sample

    221129-dt3byseb6x

  • MD5

    d06a88f85f14fa2951739cc0b565ac52

  • SHA1

    8d6b94956c7cf0787c6043a3d372f98c3b55307e

  • SHA256

    a2ca1f29e154ba98b589967c2ca5fcf5e96f0f3c0e1a6fbe740e0d29b907fa91

  • SHA512

    c6f5561d1554201331e98fac4045d50f72b89c3b2defefcb56e694ddc762894b95ba32a496c137ff6fc9f712fad9140964eba0833679d57ca14d092d600402bd

  • SSDEEP

    1536:YnJFc6Xg/VwssUfw5GZS5u61rC634cmY77UsMJXGoQDnzqLcTJLO01DvqlWgB0gZ:mJFc6QtRLYt77UsMJXGoFDwfG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a2ca1f29e154ba98b589967c2ca5fcf5e96f0f3c0e1a6fbe740e0d29b907fa91

    • Size

      140KB

    • MD5

      d06a88f85f14fa2951739cc0b565ac52

    • SHA1

      8d6b94956c7cf0787c6043a3d372f98c3b55307e

    • SHA256

      a2ca1f29e154ba98b589967c2ca5fcf5e96f0f3c0e1a6fbe740e0d29b907fa91

    • SHA512

      c6f5561d1554201331e98fac4045d50f72b89c3b2defefcb56e694ddc762894b95ba32a496c137ff6fc9f712fad9140964eba0833679d57ca14d092d600402bd

    • SSDEEP

      1536:YnJFc6Xg/VwssUfw5GZS5u61rC634cmY77UsMJXGoQDnzqLcTJLO01DvqlWgB0gZ:mJFc6QtRLYt77UsMJXGoFDwfG

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks