Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

802efaaf20...ce.exe

windows7-x64

10

802efaaf20...ce.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    802efaaf2001203c94fa2231e868e6d36193c943b7c572f1c25e79ffb92f2fce

  • Size

    200KB

  • Sample

    221202-a2s7gabd5t

  • MD5

    3c366eeab105147a0fec0dbda43eab72

  • SHA1

    ef11caa0c3dd43636e8ff8091ffaf15b12847515

  • SHA256

    802efaaf2001203c94fa2231e868e6d36193c943b7c572f1c25e79ffb92f2fce

  • SHA512

    867d5b83188f90b204135a40120183d3d215f1d8c2f733c555d7c9cacf2da69d7197ff495fba1ef28ae149a62109126e9c2ed2ab6adf3879e3ed46d45bd2c213

  • SSDEEP

    3072:8COTo/0YxAS0tQ9nLHbB9WPliBs2HWWEakGJm9GD:8CXCS4QxL7B9WPli+yWWEazb

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      802efaaf2001203c94fa2231e868e6d36193c943b7c572f1c25e79ffb92f2fce

    • Size

      200KB

    • MD5

      3c366eeab105147a0fec0dbda43eab72

    • SHA1

      ef11caa0c3dd43636e8ff8091ffaf15b12847515

    • SHA256

      802efaaf2001203c94fa2231e868e6d36193c943b7c572f1c25e79ffb92f2fce

    • SHA512

      867d5b83188f90b204135a40120183d3d215f1d8c2f733c555d7c9cacf2da69d7197ff495fba1ef28ae149a62109126e9c2ed2ab6adf3879e3ed46d45bd2c213

    • SSDEEP

      3072:8COTo/0YxAS0tQ9nLHbB9WPliBs2HWWEakGJm9GD:8CXCS4QxL7B9WPli+yWWEazb

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks