Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

a5b12eee93...98.exe

windows7-x64

10

a5b12eee93...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5b12eee93fb22d8856f5103ef1f6057f18d3bfab7f37647d4e28196878b8198

  • Size

    268KB

  • Sample

    221203-yd535adf7x

  • MD5

    7cbd3ff4570441213a1815e13be27f30

  • SHA1

    838dc7e35ec10d72cf1a24c49ca0d4999c633f77

  • SHA256

    a5b12eee93fb22d8856f5103ef1f6057f18d3bfab7f37647d4e28196878b8198

  • SHA512

    3704a61ac6ea36ecdec0d36180b45c64af1da82298dff3ae2b395357c30b611b24163b83a7dc6b746e546cb577d9d963718c8b4d65eaa9f87e22d98750f92d8d

  • SSDEEP

    6144:yGwz2Eu+yV2PL9JhCNjKV6MG31luID8NLJTPxhMbmNPjiiSjx:yXMs0Nz8tJTZhMiiT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a5b12eee93fb22d8856f5103ef1f6057f18d3bfab7f37647d4e28196878b8198

    • Size

      268KB

    • MD5

      7cbd3ff4570441213a1815e13be27f30

    • SHA1

      838dc7e35ec10d72cf1a24c49ca0d4999c633f77

    • SHA256

      a5b12eee93fb22d8856f5103ef1f6057f18d3bfab7f37647d4e28196878b8198

    • SHA512

      3704a61ac6ea36ecdec0d36180b45c64af1da82298dff3ae2b395357c30b611b24163b83a7dc6b746e546cb577d9d963718c8b4d65eaa9f87e22d98750f92d8d

    • SSDEEP

      6144:yGwz2Eu+yV2PL9JhCNjKV6MG31luID8NLJTPxhMbmNPjiiSjx:yXMs0Nz8tJTZhMiiT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks