Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

ee1e282318...3a.exe

windows7-x64

8

ee1e282318...3a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee1e2823184ac4e3549f8774db700170ea763a2fde7ddcb4379837ed2487463a.exe

  • Size

    2.1MB

  • Sample

    221201-hb6c4sgb71

  • MD5

    ab59ba909a34ec973045dcad6e867276

  • SHA1

    dd538f5e0847a245a6b3256983aa3cf2677b137e

  • SHA256

    ee1e2823184ac4e3549f8774db700170ea763a2fde7ddcb4379837ed2487463a

  • SHA512

    3206967d91933ef2b693df5d74c656162db2aeda139e32809743be39f94f52c5c4407a7f911b4df31c327059ef905cb811e3ad8ed62aea183acd71ab805f42ae

  • SSDEEP

    24576:hfAqOavfPNman8jarwLeXfB0yfM8GUS/heII8oyn6yKXbs1x3/rcpBpnuq9zq4Mq:hua82rNJKU0n8Xg1V/yrBXP

Score
8/10

Malware Config

Targets

    • Target

      ee1e2823184ac4e3549f8774db700170ea763a2fde7ddcb4379837ed2487463a.exe

    • Size

      2.1MB

    • MD5

      ab59ba909a34ec973045dcad6e867276

    • SHA1

      dd538f5e0847a245a6b3256983aa3cf2677b137e

    • SHA256

      ee1e2823184ac4e3549f8774db700170ea763a2fde7ddcb4379837ed2487463a

    • SHA512

      3206967d91933ef2b693df5d74c656162db2aeda139e32809743be39f94f52c5c4407a7f911b4df31c327059ef905cb811e3ad8ed62aea183acd71ab805f42ae

    • SSDEEP

      24576:hfAqOavfPNman8jarwLeXfB0yfM8GUS/heII8oyn6yKXbs1x3/rcpBpnuq9zq4Mq:hua82rNJKU0n8Xg1V/yrBXP

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks