Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

b24de39de0...39.exe

windows7-x64

7

b24de39de0...39.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b24de39de0678c69bf7fa48d1efc4fdb3cc44c194d3f199a0eeef5a72576af39

  • Size

    3.4MB

  • Sample

    230306-kpkdxaag8s

  • MD5

    e32a809a7bd40262fa4ed5294dbf6f55

  • SHA1

    87e9a09b1073da38f8509ceecdce051e96284ade

  • SHA256

    b24de39de0678c69bf7fa48d1efc4fdb3cc44c194d3f199a0eeef5a72576af39

  • SHA512

    4ea78e0bd8d13a818d0d6d9fb29fb2d1d7272de9dee0e7fe6a3538d942039d7c8ec864f8125f745a31c492be2628f332849e57274406042c3fb0aa91952239c9

  • SSDEEP

    98304:J9BZ5CxThkZ7Y6IDX0yrNt+1MN2vsfEunH39hLGPCfIBUR:lCfGrIDQeWWNhxZR

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      b24de39de0678c69bf7fa48d1efc4fdb3cc44c194d3f199a0eeef5a72576af39

    • Size

      3.4MB

    • MD5

      e32a809a7bd40262fa4ed5294dbf6f55

    • SHA1

      87e9a09b1073da38f8509ceecdce051e96284ade

    • SHA256

      b24de39de0678c69bf7fa48d1efc4fdb3cc44c194d3f199a0eeef5a72576af39

    • SHA512

      4ea78e0bd8d13a818d0d6d9fb29fb2d1d7272de9dee0e7fe6a3538d942039d7c8ec864f8125f745a31c492be2628f332849e57274406042c3fb0aa91952239c9

    • SSDEEP

      98304:J9BZ5CxThkZ7Y6IDX0yrNt+1MN2vsfEunH39hLGPCfIBUR:lCfGrIDQeWWNhxZR

    Score
    7/10
    discoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks