Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

af0170ff02...bf.exe

windows7-x64

8

af0170ff02...bf.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af0170ff025593e98e9dc2bdda8cde24e46dd4c26e35ba8878120a37836ddcbf

  • Size

    184KB

  • Sample

    221204-rpfjaafh66

  • MD5

    13ed3e07be245191448a5e9ac3472b00

  • SHA1

    4c38b48a34fcd53eef9fa230f308ea3e031ff434

  • SHA256

    af0170ff025593e98e9dc2bdda8cde24e46dd4c26e35ba8878120a37836ddcbf

  • SHA512

    b283ecd7448e17200a0d815c4eeef489e167f77cceee393305ffc53f77d4add401c2ca03c861ecf059f86259151167a0c4c803e47325b956c5a520fb6ce17051

  • SSDEEP

    3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3p:/7BSH8zUB+nGESaaRvoB7FJNndnI

Score
8/10

Malware Config

Targets

    • Target

      af0170ff025593e98e9dc2bdda8cde24e46dd4c26e35ba8878120a37836ddcbf

    • Size

      184KB

    • MD5

      13ed3e07be245191448a5e9ac3472b00

    • SHA1

      4c38b48a34fcd53eef9fa230f308ea3e031ff434

    • SHA256

      af0170ff025593e98e9dc2bdda8cde24e46dd4c26e35ba8878120a37836ddcbf

    • SHA512

      b283ecd7448e17200a0d815c4eeef489e167f77cceee393305ffc53f77d4add401c2ca03c861ecf059f86259151167a0c4c803e47325b956c5a520fb6ce17051

    • SSDEEP

      3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3p:/7BSH8zUB+nGESaaRvoB7FJNndnI

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks