Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5efce78a14...46.exe

windows7-x64

10

5efce78a14...46.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5efce78a14dbe10b6787f5bd1f2ad2c2fa17e12d61431b16b13ddfc383304046

  • Size

    140KB

  • Sample

    221204-nqndqsab81

  • MD5

    0d0aac5cc047ede373f422fc60916e00

  • SHA1

    ee482dfaca0b95ba3481f4d1264d0a46907d707a

  • SHA256

    5efce78a14dbe10b6787f5bd1f2ad2c2fa17e12d61431b16b13ddfc383304046

  • SHA512

    ef9e228f0bb876b43bd1430e8c4ae8e11878f8cf8c796a8b2e1598ddc15b44f7e0beb2caec395ed42ee447e5607736e5e62de2e75c91c580f51dadfacf1c0d68

  • SSDEEP

    3072:s2LacOaPAX7EjWafJMgE/2DyRuBzMuDuf3tbFR9EBoPfnvZYn:XLYaI7EjWaLBzMsgJv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5efce78a14dbe10b6787f5bd1f2ad2c2fa17e12d61431b16b13ddfc383304046

    • Size

      140KB

    • MD5

      0d0aac5cc047ede373f422fc60916e00

    • SHA1

      ee482dfaca0b95ba3481f4d1264d0a46907d707a

    • SHA256

      5efce78a14dbe10b6787f5bd1f2ad2c2fa17e12d61431b16b13ddfc383304046

    • SHA512

      ef9e228f0bb876b43bd1430e8c4ae8e11878f8cf8c796a8b2e1598ddc15b44f7e0beb2caec395ed42ee447e5607736e5e62de2e75c91c580f51dadfacf1c0d68

    • SSDEEP

      3072:s2LacOaPAX7EjWafJMgE/2DyRuBzMuDuf3tbFR9EBoPfnvZYn:XLYaI7EjWaLBzMsgJv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks