Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

e3292497d9...f1.exe

windows7-x64

8

e3292497d9...f1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3292497d937770201813637e98233305eb05c40dfe96a1395d5a9ae68bfaaf1

  • Size

    180KB

  • Sample

    221202-wd9p7sdg5s

  • MD5

    be26ebd5fcac015c6664fb43f23ce6b7

  • SHA1

    cbfdca18519fdcc79e628345221896956ea2aa49

  • SHA256

    e3292497d937770201813637e98233305eb05c40dfe96a1395d5a9ae68bfaaf1

  • SHA512

    17e6af91acdf6a12dc196d8ab70747a7f62170aa06c069b8a8c273014331fca750e0fdd6651fb12d7c949e0654b88c1d24ec711680329714f96c7bfb046f7383

  • SSDEEP

    3072:ABAp5XhKpN4eOyVTGfhEClj8jTk+0h1wk09+g8FCc5:3bXE9OiTGfhEClq97k09+Dt

Score
8/10

Malware Config

Targets

    • Target

      e3292497d937770201813637e98233305eb05c40dfe96a1395d5a9ae68bfaaf1

    • Size

      180KB

    • MD5

      be26ebd5fcac015c6664fb43f23ce6b7

    • SHA1

      cbfdca18519fdcc79e628345221896956ea2aa49

    • SHA256

      e3292497d937770201813637e98233305eb05c40dfe96a1395d5a9ae68bfaaf1

    • SHA512

      17e6af91acdf6a12dc196d8ab70747a7f62170aa06c069b8a8c273014331fca750e0fdd6651fb12d7c949e0654b88c1d24ec711680329714f96c7bfb046f7383

    • SSDEEP

      3072:ABAp5XhKpN4eOyVTGfhEClj8jTk+0h1wk09+g8FCc5:3bXE9OiTGfhEClq97k09+Dt

    Score
    8/10

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks