Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d09a4af73e...32.exe

windows7-x64

10

d09a4af73e...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d09a4af73e886805dea6984bb879a347bc5a300a8cbacad90e2425aae2a05e32

  • Size

    216KB

  • Sample

    221202-alpt4saa6z

  • MD5

    815ec385f55398e0d411b921a311c1a8

  • SHA1

    9a6315aa747375133cb61f18c2e468071fa40ab6

  • SHA256

    d09a4af73e886805dea6984bb879a347bc5a300a8cbacad90e2425aae2a05e32

  • SHA512

    f0fabb15b47a2add622c5a5d448008bbfeccc2073fc10ea7dde6c930af6d0f091a0eaa93e4017d4974eb5e95f13f6daa07788016276900ed37d3e7f62ca48acc

  • SSDEEP

    6144:324Ifrt3+TetonBi3QxRy4g09ICSnqf9uSUgkxtpsaPjK/bEoK828fwAoEn+MKb:32zrt3+TetonBi3QxRwfnqf9uSUgkxt7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d09a4af73e886805dea6984bb879a347bc5a300a8cbacad90e2425aae2a05e32

    • Size

      216KB

    • MD5

      815ec385f55398e0d411b921a311c1a8

    • SHA1

      9a6315aa747375133cb61f18c2e468071fa40ab6

    • SHA256

      d09a4af73e886805dea6984bb879a347bc5a300a8cbacad90e2425aae2a05e32

    • SHA512

      f0fabb15b47a2add622c5a5d448008bbfeccc2073fc10ea7dde6c930af6d0f091a0eaa93e4017d4974eb5e95f13f6daa07788016276900ed37d3e7f62ca48acc

    • SSDEEP

      6144:324Ifrt3+TetonBi3QxRy4g09ICSnqf9uSUgkxtpsaPjK/bEoK828fwAoEn+MKb:32zrt3+TetonBi3QxRwfnqf9uSUgkxt7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks