Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

75142ddfcb...19.exe

windows7-x64

10

75142ddfcb...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75142ddfcb0ac42d52adb1fd1cb4d51ae5cd88f019f74e6dc22094c5e3b6af19

  • Size

    156KB

  • Sample

    221203-2yp47adb38

  • MD5

    14aeb1d67c181f8f1962105f3b5a57ab

  • SHA1

    3e59717686a9b20be88ab695f8748ab2ed247cd6

  • SHA256

    75142ddfcb0ac42d52adb1fd1cb4d51ae5cd88f019f74e6dc22094c5e3b6af19

  • SHA512

    30e86921069f574acd93f9d6c7953d98f69054cb71a00f3185df52cf0852f85ff4ba23477c982602e42b3c75e351a5a8f5825f3eb0566dc79d89918b76e62afc

  • SSDEEP

    3072:95/Hqj0C0H3RvXs45qlCG8v12aO1AwPgamPe42IZ54oQZiE5R:zHW0Lvulf8v12aO1AwSPe4RxWB

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      75142ddfcb0ac42d52adb1fd1cb4d51ae5cd88f019f74e6dc22094c5e3b6af19

    • Size

      156KB

    • MD5

      14aeb1d67c181f8f1962105f3b5a57ab

    • SHA1

      3e59717686a9b20be88ab695f8748ab2ed247cd6

    • SHA256

      75142ddfcb0ac42d52adb1fd1cb4d51ae5cd88f019f74e6dc22094c5e3b6af19

    • SHA512

      30e86921069f574acd93f9d6c7953d98f69054cb71a00f3185df52cf0852f85ff4ba23477c982602e42b3c75e351a5a8f5825f3eb0566dc79d89918b76e62afc

    • SSDEEP

      3072:95/Hqj0C0H3RvXs45qlCG8v12aO1AwPgamPe42IZ54oQZiE5R:zHW0Lvulf8v12aO1AwSPe4RxWB

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks