Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

afc0af47fd...ea.exe

windows7-x64

8

afc0af47fd...ea.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    afc0af47fddd29e270d670770c35bb95a212b35c5ecac43167959318fd4b3bea

  • Size

    440KB

  • Sample

    221206-zmyabacc24

  • MD5

    dd4de41028911c5d9e1565aad48e06e5

  • SHA1

    a97a21d642390719d3b5325e3a486608423bc23b

  • SHA256

    afc0af47fddd29e270d670770c35bb95a212b35c5ecac43167959318fd4b3bea

  • SHA512

    e1df19247f3382f870f73330e6a2941de3a5236b4a4632d8d4b7f97533b088df3e5897ec7f97228441bf2079553ecf7607d1eac8ed0b02efefc5197bb29f4194

  • SSDEEP

    12288:pl41zfEOYGxSp+GKMXExFVWIaK3sojsifM:T6oOx0KMwVWIaeo

Score
8/10

Malware Config

Targets

    • Target

      afc0af47fddd29e270d670770c35bb95a212b35c5ecac43167959318fd4b3bea

    • Size

      440KB

    • MD5

      dd4de41028911c5d9e1565aad48e06e5

    • SHA1

      a97a21d642390719d3b5325e3a486608423bc23b

    • SHA256

      afc0af47fddd29e270d670770c35bb95a212b35c5ecac43167959318fd4b3bea

    • SHA512

      e1df19247f3382f870f73330e6a2941de3a5236b4a4632d8d4b7f97533b088df3e5897ec7f97228441bf2079553ecf7607d1eac8ed0b02efefc5197bb29f4194

    • SSDEEP

      12288:pl41zfEOYGxSp+GKMXExFVWIaK3sojsifM:T6oOx0KMwVWIaeo

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks