Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

afef641091...8e.exe

windows7-x64

10

afef641091...8e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e

  • Size

    116KB

  • Sample

    221205-xk3qxafe56

  • MD5

    2d47afc819ed604fd21e2cc6be139240

  • SHA1

    5329718bbb168032b959d81b819210341e493290

  • SHA256

    afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e

  • SHA512

    f1b7296311fc1eb38b70ac1a896cf980aa1139d23aa95582a823a945e3ad6d94d2513b8872d32b419f98cc05d48664858bce3046da374e5ffc0cdd482cc33f6c

  • SSDEEP

    1536:Gqpxoj++C7k8Kw6KBOIW4Z8HO1Zwt0f4HeDUEdMOPy9sbgN2wo7JaS1:FpZ+ykfIr1ZNDUEdTwQL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e

    • Size

      116KB

    • MD5

      2d47afc819ed604fd21e2cc6be139240

    • SHA1

      5329718bbb168032b959d81b819210341e493290

    • SHA256

      afef641091619698172d09d9231c66b719094983d40aba5f201ebfd71c515a8e

    • SHA512

      f1b7296311fc1eb38b70ac1a896cf980aa1139d23aa95582a823a945e3ad6d94d2513b8872d32b419f98cc05d48664858bce3046da374e5ffc0cdd482cc33f6c

    • SSDEEP

      1536:Gqpxoj++C7k8Kw6KBOIW4Z8HO1Zwt0f4HeDUEdMOPy9sbgN2wo7JaS1:FpZ+ykfIr1ZNDUEdTwQL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks