Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

9dca07d73d...6b.exe

windows7-x64

8

9dca07d73d...6b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9dca07d73d082e9aeb8083c5cdf5586f6ebab4191b9145d9fa4adb4a87c8d76b

  • Size

    361KB

  • Sample

    221206-ayfrzaef4s

  • MD5

    1982ad95f77f0868f0bb660000c8e316

  • SHA1

    ee70d3f0830e04d7ad8e1b8a50d0164063722946

  • SHA256

    9dca07d73d082e9aeb8083c5cdf5586f6ebab4191b9145d9fa4adb4a87c8d76b

  • SHA512

    6fe81636ab9a46386579923cdd6d4137a1fdb63f47dcc7e916489462952282b94e5f813a6ba615fdd400b3059f6b8cf0a1716d35660115d110001ce6e8c437e9

  • SSDEEP

    6144:dCipYp24ANqWnzUDs0/VQP0nhFCoa3uc0HWjt7kWwza9J9c6vb/IOCJT1n:dJYJ+gg05802lkWWscn1n

Score
8/10
persistence

Malware Config

Targets

    • Target

      9dca07d73d082e9aeb8083c5cdf5586f6ebab4191b9145d9fa4adb4a87c8d76b

    • Size

      361KB

    • MD5

      1982ad95f77f0868f0bb660000c8e316

    • SHA1

      ee70d3f0830e04d7ad8e1b8a50d0164063722946

    • SHA256

      9dca07d73d082e9aeb8083c5cdf5586f6ebab4191b9145d9fa4adb4a87c8d76b

    • SHA512

      6fe81636ab9a46386579923cdd6d4137a1fdb63f47dcc7e916489462952282b94e5f813a6ba615fdd400b3059f6b8cf0a1716d35660115d110001ce6e8c437e9

    • SSDEEP

      6144:dCipYp24ANqWnzUDs0/VQP0nhFCoa3uc0HWjt7kWwza9J9c6vb/IOCJT1n:dJYJ+gg05802lkWWscn1n

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks