Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d064228c41...db.exe

windows7-x64

10

d064228c41...db.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d064228c4138fbebb897dd0d74a69450ae58f1240ac9a33be7bb8e211f87a7db

  • Size

    316KB

  • Sample

    221201-3nqteafg9v

  • MD5

    8aa3ee839270cb28d05534f3fd5721d2

  • SHA1

    be496410a16b7bd22d04c5234cfb10c0f00c3514

  • SHA256

    d064228c4138fbebb897dd0d74a69450ae58f1240ac9a33be7bb8e211f87a7db

  • SHA512

    52ef0db49cdf4a3e2f43d910e170afdb12568a8d31f6c6a7987b7d99730983e99e744f2d3c80e8efed20ed57986d0eb57a2836a6a270cd4f5aebae0178ba82b0

  • SSDEEP

    3072:VZJwhpF3SpWufu/muESamFi5eLb532qRgzqRe/aT4E1KZnBmaNtDvJRZ8Ng0ykdi:VZ43jb532qRmqRe/aT4EYDmaNtNRKNi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d064228c4138fbebb897dd0d74a69450ae58f1240ac9a33be7bb8e211f87a7db

    • Size

      316KB

    • MD5

      8aa3ee839270cb28d05534f3fd5721d2

    • SHA1

      be496410a16b7bd22d04c5234cfb10c0f00c3514

    • SHA256

      d064228c4138fbebb897dd0d74a69450ae58f1240ac9a33be7bb8e211f87a7db

    • SHA512

      52ef0db49cdf4a3e2f43d910e170afdb12568a8d31f6c6a7987b7d99730983e99e744f2d3c80e8efed20ed57986d0eb57a2836a6a270cd4f5aebae0178ba82b0

    • SSDEEP

      3072:VZJwhpF3SpWufu/muESamFi5eLb532qRgzqRe/aT4E1KZnBmaNtDvJRZ8Ng0ykdi:VZ43jb532qRmqRe/aT4EYDmaNtNRKNi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks