Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

764eeede0a...72.exe

windows7-x64

10

764eeede0a...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    764eeede0a54e0b2b110e695a0795a9f19b0bd661ab491ca29fa550cb55b4472

  • Size

    204KB

  • Sample

    221201-295zsabc98

  • MD5

    fadcf0429b53e3c6381e6d0046e7722e

  • SHA1

    90842ecb410d8268d7f9d5c46f240caaf96739a1

  • SHA256

    764eeede0a54e0b2b110e695a0795a9f19b0bd661ab491ca29fa550cb55b4472

  • SHA512

    aa5e17d98f0aafed56d926ed2180ccfadd35c89c5f8830792be381d7c8cf0e56c8044fb7fa9c6d2cb103ffddbc5bb7b527a080b0cb5b4f998d57c40ae4f13111

  • SSDEEP

    3072:XmIW8AF0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUW2PN:Wd14QxL7B9W0c1RCzR/fSmlF1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      764eeede0a54e0b2b110e695a0795a9f19b0bd661ab491ca29fa550cb55b4472

    • Size

      204KB

    • MD5

      fadcf0429b53e3c6381e6d0046e7722e

    • SHA1

      90842ecb410d8268d7f9d5c46f240caaf96739a1

    • SHA256

      764eeede0a54e0b2b110e695a0795a9f19b0bd661ab491ca29fa550cb55b4472

    • SHA512

      aa5e17d98f0aafed56d926ed2180ccfadd35c89c5f8830792be381d7c8cf0e56c8044fb7fa9c6d2cb103ffddbc5bb7b527a080b0cb5b4f998d57c40ae4f13111

    • SSDEEP

      3072:XmIW8AF0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUW2PN:Wd14QxL7B9W0c1RCzR/fSmlF1

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks