Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

a871f746c9...3b.exe

windows7-x64

10

a871f746c9...3b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a871f746c9a0ac0bc359b01d234cf8369d0a1fd95365d0c7ef40e0d4342d573b

  • Size

    148KB

  • Sample

    221205-3bj54agb24

  • MD5

    488c9654f0fb0b3cb2f0f321c28a1201

  • SHA1

    9aae83f4ed5fa1a5bc80c8d7931ff0597e331461

  • SHA256

    a871f746c9a0ac0bc359b01d234cf8369d0a1fd95365d0c7ef40e0d4342d573b

  • SHA512

    3c83202eaefbd0034b53ea45168b4682ca7dc0400e5fe890e3fb6ffb26de60272778685b78fd195a52450b2008036ae4072f71d3e6cfe179f14580f52994e416

  • SSDEEP

    3072:DiFrQh4mRpDGq7At/yRWr2wA36nbMUq8hFOdhIOTE5j4oQ2:uFkh96F90Wf7nJPwdUd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a871f746c9a0ac0bc359b01d234cf8369d0a1fd95365d0c7ef40e0d4342d573b

    • Size

      148KB

    • MD5

      488c9654f0fb0b3cb2f0f321c28a1201

    • SHA1

      9aae83f4ed5fa1a5bc80c8d7931ff0597e331461

    • SHA256

      a871f746c9a0ac0bc359b01d234cf8369d0a1fd95365d0c7ef40e0d4342d573b

    • SHA512

      3c83202eaefbd0034b53ea45168b4682ca7dc0400e5fe890e3fb6ffb26de60272778685b78fd195a52450b2008036ae4072f71d3e6cfe179f14580f52994e416

    • SSDEEP

      3072:DiFrQh4mRpDGq7At/yRWr2wA36nbMUq8hFOdhIOTE5j4oQ2:uFkh96F90Wf7nJPwdUd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks