Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

c256f78f65...d4.exe

windows7-x64

10

c256f78f65...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c256f78f654cf6e62e0c75d4551caf606d9ea08be6393f77d31c5b304b24f1d4

  • Size

    228KB

  • Sample

    221202-afz3wshe8y

  • MD5

    4bf07f18960aae907ece1d67797e0b8d

  • SHA1

    61398588408ee0c47b250c1f8b2bd76e64ba7aad

  • SHA256

    c256f78f654cf6e62e0c75d4551caf606d9ea08be6393f77d31c5b304b24f1d4

  • SHA512

    ab4c6f7e05559976abfc6c405ab3f323d2046d9e2bbd81d8240cfb0dd8194017ff35363aae8cfb0a56c4af0d479b2578a7b7c139284730fae7d3a06482a87c3a

  • SSDEEP

    6144:2mA3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/HF:2m6PhAmZIH+l

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c256f78f654cf6e62e0c75d4551caf606d9ea08be6393f77d31c5b304b24f1d4

    • Size

      228KB

    • MD5

      4bf07f18960aae907ece1d67797e0b8d

    • SHA1

      61398588408ee0c47b250c1f8b2bd76e64ba7aad

    • SHA256

      c256f78f654cf6e62e0c75d4551caf606d9ea08be6393f77d31c5b304b24f1d4

    • SHA512

      ab4c6f7e05559976abfc6c405ab3f323d2046d9e2bbd81d8240cfb0dd8194017ff35363aae8cfb0a56c4af0d479b2578a7b7c139284730fae7d3a06482a87c3a

    • SSDEEP

      6144:2mA3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/HF:2m6PhAmZIH+l

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks