Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

92c62ca077...f5.exe

windows7-x64

10

92c62ca077...f5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    92c62ca077ecdb34b806a4d7e241021826aca752910fd0e1a8c99818ad899af5

  • Size

    148KB

  • Sample

    221203-yalv3shf39

  • MD5

    f44feb8f77c02dea9ba2152db3ecbdfd

  • SHA1

    414e1094e77d3700c930e566fdf663355693a831

  • SHA256

    92c62ca077ecdb34b806a4d7e241021826aca752910fd0e1a8c99818ad899af5

  • SHA512

    c568427662738501d78cd81fb12f374b526aae35a1ce28fa10d9950b5751ff3a0646c1f94df195995f1543799718a810ee4b16fa15ecfccbfa6261871bedded5

  • SSDEEP

    3072:DTBEhyHEr+6dTkon7E1v26H53sW7Jq28f3/o:D5kaQn7o2AB7E3/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      92c62ca077ecdb34b806a4d7e241021826aca752910fd0e1a8c99818ad899af5

    • Size

      148KB

    • MD5

      f44feb8f77c02dea9ba2152db3ecbdfd

    • SHA1

      414e1094e77d3700c930e566fdf663355693a831

    • SHA256

      92c62ca077ecdb34b806a4d7e241021826aca752910fd0e1a8c99818ad899af5

    • SHA512

      c568427662738501d78cd81fb12f374b526aae35a1ce28fa10d9950b5751ff3a0646c1f94df195995f1543799718a810ee4b16fa15ecfccbfa6261871bedded5

    • SSDEEP

      3072:DTBEhyHEr+6dTkon7E1v26H53sW7Jq28f3/o:D5kaQn7o2AB7E3/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks