Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

e8946e68ff...80.exe

windows7-x64

10

e8946e68ff...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8946e68ff10e7961f37562004e3564a6a1a007e2a3780bf816c8f24489e2f80

  • Size

    216KB

  • Sample

    221205-2lrggsgf7v

  • MD5

    fae78afa951c5ee1661520e1aa5c1299

  • SHA1

    24ecb36499ad2dcfc2940d37feafa3057b9fc755

  • SHA256

    e8946e68ff10e7961f37562004e3564a6a1a007e2a3780bf816c8f24489e2f80

  • SHA512

    0d7556e9ebcad187c59f744f5805398b7499d4a96945067217b27c654b0f1ca4d45ce4b171eceac2174d45aae79442a257e71f4bf516e99a2bc9420ab6d10f36

  • SSDEEP

    3072:28Tm79SHMdkgJTKMN6K/iAKRNamLFa8cstRfQbE+l:rMKGKMN66iA/Ut2oI

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e8946e68ff10e7961f37562004e3564a6a1a007e2a3780bf816c8f24489e2f80

    • Size

      216KB

    • MD5

      fae78afa951c5ee1661520e1aa5c1299

    • SHA1

      24ecb36499ad2dcfc2940d37feafa3057b9fc755

    • SHA256

      e8946e68ff10e7961f37562004e3564a6a1a007e2a3780bf816c8f24489e2f80

    • SHA512

      0d7556e9ebcad187c59f744f5805398b7499d4a96945067217b27c654b0f1ca4d45ce4b171eceac2174d45aae79442a257e71f4bf516e99a2bc9420ab6d10f36

    • SSDEEP

      3072:28Tm79SHMdkgJTKMN6K/iAKRNamLFa8cstRfQbE+l:rMKGKMN66iA/Ut2oI

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks