Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7586b5f402...e9.exe

windows7-x64

10

7586b5f402...e9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7586b5f402f8553c8eddb8524c423c3d6c3561c9e97a8c34d0b696d5beb0dfe9

  • Size

    104KB

  • Sample

    221205-myssraga3y

  • MD5

    52589a646bbfb9983bc15e3fa62fef92

  • SHA1

    1f1249117a3de74722e0e1fd10cce4e674a03a74

  • SHA256

    7586b5f402f8553c8eddb8524c423c3d6c3561c9e97a8c34d0b696d5beb0dfe9

  • SHA512

    81ec1fece594d30bd5f33d23dcff3b0eed137604bfa87cefc5cbf46c74f6a3091586ee7dfb1052d9d2a9b79b11b336246c765bf6436f590ab7e2a137fa154ac3

  • SSDEEP

    1536:T553fEQE9ZScK43sKeWjwJBAOs9G2HaQNsMj3i6E3j:F53fEQqkIsK0IHxN/Oj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7586b5f402f8553c8eddb8524c423c3d6c3561c9e97a8c34d0b696d5beb0dfe9

    • Size

      104KB

    • MD5

      52589a646bbfb9983bc15e3fa62fef92

    • SHA1

      1f1249117a3de74722e0e1fd10cce4e674a03a74

    • SHA256

      7586b5f402f8553c8eddb8524c423c3d6c3561c9e97a8c34d0b696d5beb0dfe9

    • SHA512

      81ec1fece594d30bd5f33d23dcff3b0eed137604bfa87cefc5cbf46c74f6a3091586ee7dfb1052d9d2a9b79b11b336246c765bf6436f590ab7e2a137fa154ac3

    • SSDEEP

      1536:T553fEQE9ZScK43sKeWjwJBAOs9G2HaQNsMj3i6E3j:F53fEQqkIsK0IHxN/Oj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks