Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

75c8d3ddc1...0a.exe

windows7-x64

10

75c8d3ddc1...0a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75c8d3ddc165be49625de0675f8e67dbab3ccef72c4332e4e2ef61a960ff050a

  • Size

    708KB

  • Sample

    221129-tyez8ahf21

  • MD5

    53aa77528dcccbdcda93a9df77fab463

  • SHA1

    ec3d0863d693f32c3637e2490564cf7c434ef59a

  • SHA256

    75c8d3ddc165be49625de0675f8e67dbab3ccef72c4332e4e2ef61a960ff050a

  • SHA512

    f8483b9ec12742ca2b045cf60688e03c3d6be914433bdf488d17da46302feeb992eb760202ac2a81d010b5deff0294492c786ccfb42f1b479b5d38bb0dd39841

  • SSDEEP

    12288:g72bnI+w8GNA72bnI+w8GN472bnI+w8GNA72bnI+w8GNe:g72zd72zJ72zd72zr

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      75c8d3ddc165be49625de0675f8e67dbab3ccef72c4332e4e2ef61a960ff050a

    • Size

      708KB

    • MD5

      53aa77528dcccbdcda93a9df77fab463

    • SHA1

      ec3d0863d693f32c3637e2490564cf7c434ef59a

    • SHA256

      75c8d3ddc165be49625de0675f8e67dbab3ccef72c4332e4e2ef61a960ff050a

    • SHA512

      f8483b9ec12742ca2b045cf60688e03c3d6be914433bdf488d17da46302feeb992eb760202ac2a81d010b5deff0294492c786ccfb42f1b479b5d38bb0dd39841

    • SSDEEP

      12288:g72bnI+w8GNA72bnI+w8GN472bnI+w8GNA72bnI+w8GNe:g72zd72zJ72zd72zr

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks