Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

Archivo_Do...yy.exe

windows7-x64

7

Archivo_Do...yy.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c3a0890ad64140fc946ed7fc4656721a051c805c46821463386f31a9f74c125

  • Size

    2.9MB

  • Sample

    230316-pk89paag49

  • MD5

    1f3fd36acf5d371ae08e8a64fa730288

  • SHA1

    7988e57315a3238d741028c5b6267aa7631ec906

  • SHA256

    4c3a0890ad64140fc946ed7fc4656721a051c805c46821463386f31a9f74c125

  • SHA512

    274a46a3e553339948f1130588c6cd306823802094cf9365594c775795c8164cda7638aef169a016b7ff701bef48b2285cab5d96e28960289f4d25546a1a3239

  • SSDEEP

    49152:MJig9jIqEomrMuJpv+5IXBoBAis7vhfMqzVRt2y6MbIMokS+vuq3BdmnO:MJigBIZMbS7uqkM0Ivuq3BdGO

Score
7/10

Malware Config

Targets

    • Target

      Archivo_DocumentoOIAXXNLJAIVYRNQtucyy.exe

    • Size

      266.6MB

    • MD5

      e3960990152e104d016c4b8a05dc76ac

    • SHA1

      8c5dfd0e9f37813d5168952432e914fe46fd0e4e

    • SHA256

      f0440e7b72c0a54c815f09487afd1fe19f26a7c3616810402f6675af8ee08220

    • SHA512

      e94ee98dd2102276d06ab074d2ca550dbb238895eaa9588df8aa97bfdecc85d0db36daa4ea7bce8edd68afe69852fc119a294043aedd496e4fab0732bdfc74b3

    • SSDEEP

      98304:6NPgYs1HlKS+bjACZY3NoWHu7PcaHfVxv11m3ISv:6qYs1IMCyaHfVxN

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks