Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

895c725e59...43.exe

windows7-x64

1

895c725e59...43.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    895c725e599ae21052afcb7ca35013136f1abbac7985f8fa3538bfea300e0e43

  • Size

    140KB

  • Sample

    221203-ex772sgh9y

  • MD5

    6d8ccbe9d478d6c2c05c341c6294a572

  • SHA1

    54ba998f3ad77bea2e12330ac6bcb5cf3c152640

  • SHA256

    895c725e599ae21052afcb7ca35013136f1abbac7985f8fa3538bfea300e0e43

  • SHA512

    3744ebb53adc400e5eea9fdde6b5f179f32cb539f38368075c8139f760e964622c323a75a0666894b3a794dc3e5cd299dd20463ccf84874026afadad1a771e50

  • SSDEEP

    1536:nnMg2OVLjlevyaRLBnLuRgiaUxRIxecePKH5nKLV+q:M0LpeTLlamiaUxRIxecePKQ/

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      895c725e599ae21052afcb7ca35013136f1abbac7985f8fa3538bfea300e0e43

    • Size

      140KB

    • MD5

      6d8ccbe9d478d6c2c05c341c6294a572

    • SHA1

      54ba998f3ad77bea2e12330ac6bcb5cf3c152640

    • SHA256

      895c725e599ae21052afcb7ca35013136f1abbac7985f8fa3538bfea300e0e43

    • SHA512

      3744ebb53adc400e5eea9fdde6b5f179f32cb539f38368075c8139f760e964622c323a75a0666894b3a794dc3e5cd299dd20463ccf84874026afadad1a771e50

    • SSDEEP

      1536:nnMg2OVLjlevyaRLBnLuRgiaUxRIxecePKH5nKLV+q:M0LpeTLlamiaUxRIxecePKQ/

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks