Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

9f2507a35b...13.exe

windows7-x64

10

9f2507a35b...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f2507a35bc333af0c329ffc75dbb63fe4406ecd33058bf761f2b35f3657e113

  • Size

    200KB

  • Sample

    221205-mdjpcaeb6y

  • MD5

    41ac0dc2820fd7f7ac9b4abbdd4ae2c6

  • SHA1

    2686875dcccaa118b566612fd9e581350ddbf5a9

  • SHA256

    9f2507a35bc333af0c329ffc75dbb63fe4406ecd33058bf761f2b35f3657e113

  • SHA512

    e678614489f66a1535055e1e71ab2f25857a18407d1f7ad8841852068af98698576e3f2fcb33007b624b5e29c97baf4b75e8227ff315a406900ca990ba1358b9

  • SSDEEP

    6144:W8u5j7Knvmb7/D26rfo9Am26fBXMZ8R3FXjrCTYTQdq4qJUGQBSpYCbw6I:ju5j7Knvmb7/D26zZ8R3FXjrC8T8q4q+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9f2507a35bc333af0c329ffc75dbb63fe4406ecd33058bf761f2b35f3657e113

    • Size

      200KB

    • MD5

      41ac0dc2820fd7f7ac9b4abbdd4ae2c6

    • SHA1

      2686875dcccaa118b566612fd9e581350ddbf5a9

    • SHA256

      9f2507a35bc333af0c329ffc75dbb63fe4406ecd33058bf761f2b35f3657e113

    • SHA512

      e678614489f66a1535055e1e71ab2f25857a18407d1f7ad8841852068af98698576e3f2fcb33007b624b5e29c97baf4b75e8227ff315a406900ca990ba1358b9

    • SSDEEP

      6144:W8u5j7Knvmb7/D26rfo9Am26fBXMZ8R3FXjrCTYTQdq4qJUGQBSpYCbw6I:ju5j7Knvmb7/D26zZ8R3FXjrC8T8q4q+

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks