Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

e976a9c66b...e4.exe

windows7-x64

10

e976a9c66b...e4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e976a9c66b9626423a0b90331fd084eb584db44f87189f98d8f3ee8bc32b24e4

  • Size

    140KB

  • Sample

    221205-3g1p2age77

  • MD5

    f5122d396afac83cf5d5c8dabaf02759

  • SHA1

    7244e0d4e91b90e5013430115e0cdefcac5fe284

  • SHA256

    e976a9c66b9626423a0b90331fd084eb584db44f87189f98d8f3ee8bc32b24e4

  • SHA512

    e2f81f4936f4bf1229e98542a3bff0bb85f41db43c5e6588435d92d932fea0fae1d5b54dd456a61035335268499eda29ac982ce2229c7fb15e2f9482e42aec7f

  • SSDEEP

    3072:gax8/3vu3XuIcN6/xbccM3hEL8fyUha5fNiSLA:ga2/uuIcNmLX8dhaRNiV

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e976a9c66b9626423a0b90331fd084eb584db44f87189f98d8f3ee8bc32b24e4

    • Size

      140KB

    • MD5

      f5122d396afac83cf5d5c8dabaf02759

    • SHA1

      7244e0d4e91b90e5013430115e0cdefcac5fe284

    • SHA256

      e976a9c66b9626423a0b90331fd084eb584db44f87189f98d8f3ee8bc32b24e4

    • SHA512

      e2f81f4936f4bf1229e98542a3bff0bb85f41db43c5e6588435d92d932fea0fae1d5b54dd456a61035335268499eda29ac982ce2229c7fb15e2f9482e42aec7f

    • SSDEEP

      3072:gax8/3vu3XuIcN6/xbccM3hEL8fyUha5fNiSLA:ga2/uuIcNmLX8dhaRNiV

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks