Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

78e3f73817...f2.exe

windows7-x64

10

78e3f73817...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78e3f73817a8b6cd808a65637238007fda2cc895d81bf20637e7b00f20876ff2

  • Size

    204KB

  • Sample

    221205-ym3z5aea3v

  • MD5

    385bec28861271e4cbd39aa5817f7290

  • SHA1

    dd1e97b0b382f8966b5ccad3c020aa672b4b9d85

  • SHA256

    78e3f73817a8b6cd808a65637238007fda2cc895d81bf20637e7b00f20876ff2

  • SHA512

    93197163d4972789efa7496f4cf4c5ac7769dd1ce5d38a64039b4e5b28e6e2eb4fb2fedd3e3a20e180679321d52d71604925d89c097115e6305003d7b996c7e7

  • SSDEEP

    768:Pj9Qio1h5LU0dcxmJUMncu/VLHpFIkid+JFIkNcr9fLkWEUYn6sNpcspj6W8Lx4R:Pj9Qh1/vgM/AQmSNFONMlszAjUkxlNm

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      78e3f73817a8b6cd808a65637238007fda2cc895d81bf20637e7b00f20876ff2

    • Size

      204KB

    • MD5

      385bec28861271e4cbd39aa5817f7290

    • SHA1

      dd1e97b0b382f8966b5ccad3c020aa672b4b9d85

    • SHA256

      78e3f73817a8b6cd808a65637238007fda2cc895d81bf20637e7b00f20876ff2

    • SHA512

      93197163d4972789efa7496f4cf4c5ac7769dd1ce5d38a64039b4e5b28e6e2eb4fb2fedd3e3a20e180679321d52d71604925d89c097115e6305003d7b996c7e7

    • SSDEEP

      768:Pj9Qio1h5LU0dcxmJUMncu/VLHpFIkid+JFIkNcr9fLkWEUYn6sNpcspj6W8Lx4R:Pj9Qh1/vgM/AQmSNFONMlszAjUkxlNm

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks