Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d7b4cc7f5c...a9.exe

windows7-x64

10

d7b4cc7f5c...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7b4cc7f5c1d6159af3cf041bb89dafbc36e711edb9fb8bd47399212e94972a9

  • Size

    228KB

  • Sample

    221203-xsap4aga86

  • MD5

    f63843c83905455cdcc73951287857d9

  • SHA1

    c115fd9fd1acb588474964118a97af2f241faddf

  • SHA256

    d7b4cc7f5c1d6159af3cf041bb89dafbc36e711edb9fb8bd47399212e94972a9

  • SHA512

    b38cd34e13b9df77fbe751c64c80b976e20d2e7277fc97ec56d524aad902fbe41b93e20aa4fe75e1f4579b9261421367aa4b54f914582b1f4a6bff65e8226ec0

  • SSDEEP

    6144:TzH7PvUvbTLzVBEGLUsDFlWU+Xo9clqiqTGbPQglaqM:TzH7Pv0WBo9UnbPQgnM

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d7b4cc7f5c1d6159af3cf041bb89dafbc36e711edb9fb8bd47399212e94972a9

    • Size

      228KB

    • MD5

      f63843c83905455cdcc73951287857d9

    • SHA1

      c115fd9fd1acb588474964118a97af2f241faddf

    • SHA256

      d7b4cc7f5c1d6159af3cf041bb89dafbc36e711edb9fb8bd47399212e94972a9

    • SHA512

      b38cd34e13b9df77fbe751c64c80b976e20d2e7277fc97ec56d524aad902fbe41b93e20aa4fe75e1f4579b9261421367aa4b54f914582b1f4a6bff65e8226ec0

    • SSDEEP

      6144:TzH7PvUvbTLzVBEGLUsDFlWU+Xo9clqiqTGbPQglaqM:TzH7Pv0WBo9UnbPQgnM

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks