Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

39fe8eac5f...96.exe

windows7-x64

8

39fe8eac5f...96.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39fe8eac5fd89bf85de2ebb2900ce19ddfea4e2c3ce31311ac7c15d813ef9c96

  • Size

    78KB

  • Sample

    221202-agczrahf21

  • MD5

    945003bafa2e3c6d008df685e9820d36

  • SHA1

    583f4e1455e6d64eb273f90e2ed3c92f355319c2

  • SHA256

    39fe8eac5fd89bf85de2ebb2900ce19ddfea4e2c3ce31311ac7c15d813ef9c96

  • SHA512

    e9c47d4fbcb6076e0869d2965f6d594ba4c6db6069262bd7d8beb74fa929bd705ae58647219e69b1afe57e152ddab0ee1f40dff1e7f85a9003da12fcd0fa9247

  • SSDEEP

    768:Q//QAtksRzwFys/n/L/n/Iy9y+fCn9wDVLrIzepPTeJttsud0MFtg4szKjugeanz:Q34I8/jfK+qOVnIYPyuMo4OaKYLFr

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      39fe8eac5fd89bf85de2ebb2900ce19ddfea4e2c3ce31311ac7c15d813ef9c96

    • Size

      78KB

    • MD5

      945003bafa2e3c6d008df685e9820d36

    • SHA1

      583f4e1455e6d64eb273f90e2ed3c92f355319c2

    • SHA256

      39fe8eac5fd89bf85de2ebb2900ce19ddfea4e2c3ce31311ac7c15d813ef9c96

    • SHA512

      e9c47d4fbcb6076e0869d2965f6d594ba4c6db6069262bd7d8beb74fa929bd705ae58647219e69b1afe57e152ddab0ee1f40dff1e7f85a9003da12fcd0fa9247

    • SSDEEP

      768:Q//QAtksRzwFys/n/L/n/Iy9y+fCn9wDVLrIzepPTeJttsud0MFtg4szKjugeanz:Q34I8/jfK+qOVnIYPyuMo4OaKYLFr

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks