Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d05d40d346...b6.exe

windows7-x64

10

d05d40d346...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d05d40d34639e9a5d782cf87d5c7117ff2496fd69648f9ccfe999cdb0d6617b6

  • Size

    140KB

  • Sample

    221202-arfhmafb48

  • MD5

    3193db93a537528782b1ba428b370980

  • SHA1

    7271acf3a4accdd81749a9015d0a42b28a3d717b

  • SHA256

    d05d40d34639e9a5d782cf87d5c7117ff2496fd69648f9ccfe999cdb0d6617b6

  • SHA512

    4500ebb4e1e99885d106fd3260553db1ad9da9e47fa5c926ce37178895d1c9582400b9a40090b60a49c49dd260230d93f076065be1cdfaf2e14085778488a3e6

  • SSDEEP

    1536:f+NQe6VtKycXYAcANSU+MNG5ipzqNbCa34YaI77UsMJn1ogCnzqLcTJLO01DvqKF:IZeKyEYnAz4R77UsMJn1oyfG+gx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d05d40d34639e9a5d782cf87d5c7117ff2496fd69648f9ccfe999cdb0d6617b6

    • Size

      140KB

    • MD5

      3193db93a537528782b1ba428b370980

    • SHA1

      7271acf3a4accdd81749a9015d0a42b28a3d717b

    • SHA256

      d05d40d34639e9a5d782cf87d5c7117ff2496fd69648f9ccfe999cdb0d6617b6

    • SHA512

      4500ebb4e1e99885d106fd3260553db1ad9da9e47fa5c926ce37178895d1c9582400b9a40090b60a49c49dd260230d93f076065be1cdfaf2e14085778488a3e6

    • SSDEEP

      1536:f+NQe6VtKycXYAcANSU+MNG5ipzqNbCa34YaI77UsMJn1ogCnzqLcTJLO01DvqKF:IZeKyEYnAz4R77UsMJn1oyfG+gx

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks