Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

c789524750...d4.exe

windows7-x64

10

c789524750...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7895247505fbb6aa55999734710c5614e199607b5362ac2839e14baede1edd4

  • Size

    124KB

  • Sample

    221205-xj8wjafd58

  • MD5

    0f3d0f72328d562ba2f3f92daea7fccd

  • SHA1

    d9b99e0faaa667b1effa7d2b5efcf4a081039cef

  • SHA256

    c7895247505fbb6aa55999734710c5614e199607b5362ac2839e14baede1edd4

  • SHA512

    666734f91dea31760679bbcb851fc3e2b7008908b5ba340d96491f4f3b4479ebc4452b2a310c1b93f301e7c676cffe6e4fbf2559ad003a30ad7f21a46dce937a

  • SSDEEP

    1536:JDEchwRTuBxeDtMYHa27J14ltxporZ45iMNeG0h/y:pEchwRTkeV6gJ1uCt45eq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c7895247505fbb6aa55999734710c5614e199607b5362ac2839e14baede1edd4

    • Size

      124KB

    • MD5

      0f3d0f72328d562ba2f3f92daea7fccd

    • SHA1

      d9b99e0faaa667b1effa7d2b5efcf4a081039cef

    • SHA256

      c7895247505fbb6aa55999734710c5614e199607b5362ac2839e14baede1edd4

    • SHA512

      666734f91dea31760679bbcb851fc3e2b7008908b5ba340d96491f4f3b4479ebc4452b2a310c1b93f301e7c676cffe6e4fbf2559ad003a30ad7f21a46dce937a

    • SSDEEP

      1536:JDEchwRTuBxeDtMYHa27J14ltxporZ45iMNeG0h/y:pEchwRTkeV6gJ1uCt45eq

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks