Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d67436f9ea...fe.exe

windows7-x64

10

d67436f9ea...fe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d67436f9eaccfdfac2ba7e6e193e0723f1f4700e4341910c24462bd0d0a3c8fe

  • Size

    132KB

  • Sample

    221204-prba8shf25

  • MD5

    e316ca10ca36bf16d8a12b65c1738be9

  • SHA1

    0d3fe44389a5e0ef52adf631037f081b0af439ec

  • SHA256

    d67436f9eaccfdfac2ba7e6e193e0723f1f4700e4341910c24462bd0d0a3c8fe

  • SHA512

    045e31f48bb41ad31bd2b749814c9d9012dccc87803ed02af4af49b131298e9fc957486f798e203d5728f4672b5999dc766da00dbabd82ad12cf5c6c2fba24ce

  • SSDEEP

    3072:fHvT/uIO3SexfF7C+Kqyyyc6CzgwL5+pta:fPTW7xfF+hm9zgwLI

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d67436f9eaccfdfac2ba7e6e193e0723f1f4700e4341910c24462bd0d0a3c8fe

    • Size

      132KB

    • MD5

      e316ca10ca36bf16d8a12b65c1738be9

    • SHA1

      0d3fe44389a5e0ef52adf631037f081b0af439ec

    • SHA256

      d67436f9eaccfdfac2ba7e6e193e0723f1f4700e4341910c24462bd0d0a3c8fe

    • SHA512

      045e31f48bb41ad31bd2b749814c9d9012dccc87803ed02af4af49b131298e9fc957486f798e203d5728f4672b5999dc766da00dbabd82ad12cf5c6c2fba24ce

    • SSDEEP

      3072:fHvT/uIO3SexfF7C+Kqyyyc6CzgwL5+pta:fPTW7xfF+hm9zgwLI

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks