Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

92195d2e3f...4c.exe

windows7-x64

10

92195d2e3f...4c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    92195d2e3f40e5251f95d052d282986d9f54f04f8ea90103f61829ce02cb724c

  • Size

    224KB

  • Sample

    221203-yrv53sba93

  • MD5

    7124dcef46c91490e5ebe768f96a3179

  • SHA1

    9764fe3c4ba6cb73a46a02e234213659cebeb16a

  • SHA256

    92195d2e3f40e5251f95d052d282986d9f54f04f8ea90103f61829ce02cb724c

  • SHA512

    8bf2957bd2bd69d9ac034b786e2d0b204b53da90c8ab417fecb7d13c6db8ab96a8222e8b17987ab787612e7d0f894ca3a1cdfae6b1c2fa00ad0e7dfa993175a9

  • SSDEEP

    3072:hiYBN7aWbqDImDrT+UvtkvnNBLieMyiayNe2XKrJlZmNlDY:hFBvuImDrT+U1QtMyiaO6mS

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      92195d2e3f40e5251f95d052d282986d9f54f04f8ea90103f61829ce02cb724c

    • Size

      224KB

    • MD5

      7124dcef46c91490e5ebe768f96a3179

    • SHA1

      9764fe3c4ba6cb73a46a02e234213659cebeb16a

    • SHA256

      92195d2e3f40e5251f95d052d282986d9f54f04f8ea90103f61829ce02cb724c

    • SHA512

      8bf2957bd2bd69d9ac034b786e2d0b204b53da90c8ab417fecb7d13c6db8ab96a8222e8b17987ab787612e7d0f894ca3a1cdfae6b1c2fa00ad0e7dfa993175a9

    • SSDEEP

      3072:hiYBN7aWbqDImDrT+UvtkvnNBLieMyiayNe2XKrJlZmNlDY:hFBvuImDrT+U1QtMyiaO6mS

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks