Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

89e70682c2...48.exe

windows7-x64

10

89e70682c2...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89e70682c22b3dcbcf4f9ef047fa776106823241871173dad4d35700ca48d548

  • Size

    260KB

  • Sample

    221202-ahxesahg41

  • MD5

    4eccd06e3b5a5d86f896f6d4abad9602

  • SHA1

    010a01b9617c6e9f3d180c440bed76744295e7b6

  • SHA256

    89e70682c22b3dcbcf4f9ef047fa776106823241871173dad4d35700ca48d548

  • SHA512

    bd4be6c680c08f158dedf540e32c7f9017350779d7c5ec3e1471926d6d19bd7159e509de79b41a00e62fca5e688e0d44c085db84671d06ad909ffa19a93a564d

  • SSDEEP

    3072:Zw9eibxUTiE64j9a45Kf/4xLMfKdRR7yH3TFavCPQjIYQHCd8boxQVV/V3xion:eOT/6qKWmH3TFCCoNLx+VH

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      89e70682c22b3dcbcf4f9ef047fa776106823241871173dad4d35700ca48d548

    • Size

      260KB

    • MD5

      4eccd06e3b5a5d86f896f6d4abad9602

    • SHA1

      010a01b9617c6e9f3d180c440bed76744295e7b6

    • SHA256

      89e70682c22b3dcbcf4f9ef047fa776106823241871173dad4d35700ca48d548

    • SHA512

      bd4be6c680c08f158dedf540e32c7f9017350779d7c5ec3e1471926d6d19bd7159e509de79b41a00e62fca5e688e0d44c085db84671d06ad909ffa19a93a564d

    • SSDEEP

      3072:Zw9eibxUTiE64j9a45Kf/4xLMfKdRR7yH3TFavCPQjIYQHCd8boxQVV/V3xion:eOT/6qKWmH3TFCCoNLx+VH

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks