Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

98fa516f2f...c5.exe

windows7-x64

10

98fa516f2f...c5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98fa516f2f07464785bb6de08dd524e39f1008d6ee3ec763b274e8c37565a8c5

  • Size

    240KB

  • Sample

    221205-lnmnbafh87

  • MD5

    692bebd03c0c66930f14e6c4b868adb4

  • SHA1

    3aa1a5be4d4a98f820fa3655b89d76073795f782

  • SHA256

    98fa516f2f07464785bb6de08dd524e39f1008d6ee3ec763b274e8c37565a8c5

  • SHA512

    7c23176510ca5c47b14807b7a038fa841ec60d93f28d606ca2f3dd3a381b64b7471cf7181d8c966012d7babae938f4dc080b5b907d6d394ac355da2a77f0217b

  • SSDEEP

    6144:sP3dwqsNTNEXGlQR58EqxF6snji81RUinKq3aEESliD5:sPdQKjeaEEp

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      98fa516f2f07464785bb6de08dd524e39f1008d6ee3ec763b274e8c37565a8c5

    • Size

      240KB

    • MD5

      692bebd03c0c66930f14e6c4b868adb4

    • SHA1

      3aa1a5be4d4a98f820fa3655b89d76073795f782

    • SHA256

      98fa516f2f07464785bb6de08dd524e39f1008d6ee3ec763b274e8c37565a8c5

    • SHA512

      7c23176510ca5c47b14807b7a038fa841ec60d93f28d606ca2f3dd3a381b64b7471cf7181d8c966012d7babae938f4dc080b5b907d6d394ac355da2a77f0217b

    • SSDEEP

      6144:sP3dwqsNTNEXGlQR58EqxF6snji81RUinKq3aEESliD5:sPdQKjeaEEp

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks