Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

e762b07d67...d9.exe

windows7-x64

10

e762b07d67...d9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e762b07d679a28559eda694236b236c99db7da1f3bf73f09b2f2fbd89c6347d9

  • Size

    92KB

  • Sample

    221201-3nk8xsce94

  • MD5

    32abe8c68833eedffd3e75a02ace0c8c

  • SHA1

    34507363198f5b53be73713a08b17e3ff743b6b0

  • SHA256

    e762b07d679a28559eda694236b236c99db7da1f3bf73f09b2f2fbd89c6347d9

  • SHA512

    96785f7274442b3f6ce7b91d7bf9352ded7ef358ad733f0c348544ac2f4e86dfa87d2a14f0dbf83a4b4d9307188f27459bff78219021901714db144266336765

  • SSDEEP

    768:cdcj7MZtBTSD9mx0CjIGhY4VVN2b1LllfRddcQVEWmSgPl53XXT+Aeu0:cdZq9Cr0GhXKdTdTiWmDPv3XAu0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e762b07d679a28559eda694236b236c99db7da1f3bf73f09b2f2fbd89c6347d9

    • Size

      92KB

    • MD5

      32abe8c68833eedffd3e75a02ace0c8c

    • SHA1

      34507363198f5b53be73713a08b17e3ff743b6b0

    • SHA256

      e762b07d679a28559eda694236b236c99db7da1f3bf73f09b2f2fbd89c6347d9

    • SHA512

      96785f7274442b3f6ce7b91d7bf9352ded7ef358ad733f0c348544ac2f4e86dfa87d2a14f0dbf83a4b4d9307188f27459bff78219021901714db144266336765

    • SSDEEP

      768:cdcj7MZtBTSD9mx0CjIGhY4VVN2b1LllfRddcQVEWmSgPl53XXT+Aeu0:cdZq9Cr0GhXKdTdTiWmDPv3XAu0

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks