Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

915cc6e0b4...73.exe

windows7-x64

8

915cc6e0b4...73.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    915cc6e0b4eb3bd12e5f1919b66de5e3acfbcdc72b5cce6c5c0c656e1d9d1c73

  • Size

    1.5MB

  • Sample

    221206-c1ph1aha95

  • MD5

    d024a15e3aca2d00fb08630d658a0908

  • SHA1

    539176c120e436f315d036731a12368fa9eae0df

  • SHA256

    915cc6e0b4eb3bd12e5f1919b66de5e3acfbcdc72b5cce6c5c0c656e1d9d1c73

  • SHA512

    b7d9e1b5daf0b58be3cd179ebca4953fc7648a5d8e3d4259e27b41871945a97f1688a67842b636532cf5761813790ba3dcf20a269092f8cce16e31b6ae9b29a1

  • SSDEEP

    24576:dcqmv1tJkM75eUV5zea9DVe2FuNc6NAJgB8Z7GXfX8jOQa74QQJbNQKAmRaWTRom:mv1x51V5Re2oN3ACB8UvMwQJhHRjogGu

Score
8/10
persistence

Malware Config

Targets

    • Target

      915cc6e0b4eb3bd12e5f1919b66de5e3acfbcdc72b5cce6c5c0c656e1d9d1c73

    • Size

      1.5MB

    • MD5

      d024a15e3aca2d00fb08630d658a0908

    • SHA1

      539176c120e436f315d036731a12368fa9eae0df

    • SHA256

      915cc6e0b4eb3bd12e5f1919b66de5e3acfbcdc72b5cce6c5c0c656e1d9d1c73

    • SHA512

      b7d9e1b5daf0b58be3cd179ebca4953fc7648a5d8e3d4259e27b41871945a97f1688a67842b636532cf5761813790ba3dcf20a269092f8cce16e31b6ae9b29a1

    • SSDEEP

      24576:dcqmv1tJkM75eUV5zea9DVe2FuNc6NAJgB8Z7GXfX8jOQa74QQJbNQKAmRaWTRom:mv1x51V5Re2oN3ACB8UvMwQJhHRjogGu

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks