Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

c5a6d62e7c...e7.exe

windows7-x64

10

c5a6d62e7c...e7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5a6d62e7c1129eb0c9eea3f53dc21f7d6fb27ce17631a1a34cdedb2b843c5e7

  • Size

    104KB

  • Sample

    221202-awdjtsah2v

  • MD5

    4e328816077504a745143f9588464f10

  • SHA1

    9f556508031efc0aca1d37624db924ff25c35ec8

  • SHA256

    c5a6d62e7c1129eb0c9eea3f53dc21f7d6fb27ce17631a1a34cdedb2b843c5e7

  • SHA512

    18e31600641ffc5c2fe04cef02861cc6a48fdbf41411a5db828a7ef89cb912fc03663119c6c9410fd37ea4062da42fac835e31eb63898b1d1aa083afa4f12880

  • SSDEEP

    1536:3ohvr9fY7ieh6hC3KwTHlyHcw1rqVjSxakAyBGss7oJd:YhTlLehWwTHlyHBQNSxZs7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c5a6d62e7c1129eb0c9eea3f53dc21f7d6fb27ce17631a1a34cdedb2b843c5e7

    • Size

      104KB

    • MD5

      4e328816077504a745143f9588464f10

    • SHA1

      9f556508031efc0aca1d37624db924ff25c35ec8

    • SHA256

      c5a6d62e7c1129eb0c9eea3f53dc21f7d6fb27ce17631a1a34cdedb2b843c5e7

    • SHA512

      18e31600641ffc5c2fe04cef02861cc6a48fdbf41411a5db828a7ef89cb912fc03663119c6c9410fd37ea4062da42fac835e31eb63898b1d1aa083afa4f12880

    • SSDEEP

      1536:3ohvr9fY7ieh6hC3KwTHlyHcw1rqVjSxakAyBGss7oJd:YhTlLehWwTHlyHBQNSxZs7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks