Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6c7fa479ae...8b.exe

windows7-x64

10

6c7fa479ae...8b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c7fa479aef712ab09fcca4ae8cf786ab48004cf6cba963d465a7be929af538b

  • Size

    320KB

  • Sample

    221206-mf4gjahd24

  • MD5

    3ce067bc36bbde6cb6c098cb8baf3a90

  • SHA1

    c453d26a69ad6e0f831c952b0653abc7caf24e81

  • SHA256

    6c7fa479aef712ab09fcca4ae8cf786ab48004cf6cba963d465a7be929af538b

  • SHA512

    6e19e6730d91e09d5bc5c0a493785042c70490baef311e53164d52d2d3fc32d40a983601ee2c7399e964650af753bd46b725bec9ab7bdeac438c86f17166da63

  • SSDEEP

    6144:tD+xPxlsG6i1xJ66onJGr+qyVztumGS5Ni3hpgoMKMphaeVf2B71uy:tMPjsG6iH6JGr+qyVztumGS5YqoyU71x

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6c7fa479aef712ab09fcca4ae8cf786ab48004cf6cba963d465a7be929af538b

    • Size

      320KB

    • MD5

      3ce067bc36bbde6cb6c098cb8baf3a90

    • SHA1

      c453d26a69ad6e0f831c952b0653abc7caf24e81

    • SHA256

      6c7fa479aef712ab09fcca4ae8cf786ab48004cf6cba963d465a7be929af538b

    • SHA512

      6e19e6730d91e09d5bc5c0a493785042c70490baef311e53164d52d2d3fc32d40a983601ee2c7399e964650af753bd46b725bec9ab7bdeac438c86f17166da63

    • SSDEEP

      6144:tD+xPxlsG6i1xJ66onJGr+qyVztumGS5Ni3hpgoMKMphaeVf2B71uy:tMPjsG6iH6JGr+qyVztumGS5YqoyU71x

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks