Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

554a7d6bc9...c3.exe

windows7-x64

10

554a7d6bc9...c3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    554a7d6bc9b75f5e8c9e58fb4dba4e6f00f8484949b96a7cb547a4e743be62c3

  • Size

    204KB

  • Sample

    221207-drl7ysdc4t

  • MD5

    8624467945ead960cd9c625519d99395

  • SHA1

    72ef8109ec59fdb1a523e94395d37eff351ac1fd

  • SHA256

    554a7d6bc9b75f5e8c9e58fb4dba4e6f00f8484949b96a7cb547a4e743be62c3

  • SHA512

    b40a8182aa9cee2221e38af2c631ec50a76226af59d172a0ced1699ee2252f01262b9b88748a1133346c747dd1ab0ddb44f108d628a0def9694eed4d362d1924

  • SSDEEP

    6144:QHMJtfNngeO+cwjfTfGHN1RWrOy9uJV10BK+baPe3ObUrlBXvgd7Vc7ht:QHENngeO+cwjfTfGHN1Ax9uJV10BK+b5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      554a7d6bc9b75f5e8c9e58fb4dba4e6f00f8484949b96a7cb547a4e743be62c3

    • Size

      204KB

    • MD5

      8624467945ead960cd9c625519d99395

    • SHA1

      72ef8109ec59fdb1a523e94395d37eff351ac1fd

    • SHA256

      554a7d6bc9b75f5e8c9e58fb4dba4e6f00f8484949b96a7cb547a4e743be62c3

    • SHA512

      b40a8182aa9cee2221e38af2c631ec50a76226af59d172a0ced1699ee2252f01262b9b88748a1133346c747dd1ab0ddb44f108d628a0def9694eed4d362d1924

    • SSDEEP

      6144:QHMJtfNngeO+cwjfTfGHN1RWrOy9uJV10BK+baPe3ObUrlBXvgd7Vc7ht:QHENngeO+cwjfTfGHN1Ax9uJV10BK+b5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks