Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

03fc86ce39...f6.exe

windows7-x64

10

03fc86ce39...f6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03fc86ce395594d7236ebc8f654e14b1b416369d393ef68bc735c02e5078eaf6

  • Size

    96KB

  • Sample

    221207-dcw4lshd38

  • MD5

    b9248e7d937265db39e7f415612ac184

  • SHA1

    6a4479d6416c340d77db5f803e5f03f02af953bd

  • SHA256

    03fc86ce395594d7236ebc8f654e14b1b416369d393ef68bc735c02e5078eaf6

  • SHA512

    203e96c020dd95ffa369324ffaa15d4e0785ec024e6741b9dc0fc13e596fa08282bb8cda26250ed21d8d558ea2527a674eff0fdb4f204d5f5ef82f5c68bf4601

  • SSDEEP

    1536:33hBHbf6cOahhkGulSc16l6u+NMMl/KlYv1T4hThFgNIjnZan:fhhGlu88FFgCn8n

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      03fc86ce395594d7236ebc8f654e14b1b416369d393ef68bc735c02e5078eaf6

    • Size

      96KB

    • MD5

      b9248e7d937265db39e7f415612ac184

    • SHA1

      6a4479d6416c340d77db5f803e5f03f02af953bd

    • SHA256

      03fc86ce395594d7236ebc8f654e14b1b416369d393ef68bc735c02e5078eaf6

    • SHA512

      203e96c020dd95ffa369324ffaa15d4e0785ec024e6741b9dc0fc13e596fa08282bb8cda26250ed21d8d558ea2527a674eff0fdb4f204d5f5ef82f5c68bf4601

    • SSDEEP

      1536:33hBHbf6cOahhkGulSc16l6u+NMMl/KlYv1T4hThFgNIjnZan:fhhGlu88FFgCn8n

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks