Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

fee3db5db8...46.msi

windows7-x64

8

fee3db5db8...46.msi

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fee3db5db8817e82b1af4cedafd2f346.bin

  • Size

    166KB

  • Sample

    230412-fth97aaa85

  • MD5

    fee3db5db8817e82b1af4cedafd2f346

  • SHA1

    e6bcf68c7d55fc933e7a7e2ca1fb4e8fa1ad376d

  • SHA256

    4808815cb03b5f31841c74755897b65ed03e56dbddbe0d1fed06af3710f32d51

  • SHA512

    37bbe3176b6d793b2b140e6bb6989b322832bdd77869d86e071e7566902fa9f718a647c2fb347a8a79f1fd9b5d5fc376ba8ddfa516944c3134d351048853278c

  • SSDEEP

    3072:cCZXtgABNBJ1BP5mUopW5KfTl6bmneDhZd31JHtb/B9:cedgABj3op+KrcrtZd31Ftb/B9

Score
8/10

Malware Config

Targets

    • Target

      fee3db5db8817e82b1af4cedafd2f346.bin

    • Size

      166KB

    • MD5

      fee3db5db8817e82b1af4cedafd2f346

    • SHA1

      e6bcf68c7d55fc933e7a7e2ca1fb4e8fa1ad376d

    • SHA256

      4808815cb03b5f31841c74755897b65ed03e56dbddbe0d1fed06af3710f32d51

    • SHA512

      37bbe3176b6d793b2b140e6bb6989b322832bdd77869d86e071e7566902fa9f718a647c2fb347a8a79f1fd9b5d5fc376ba8ddfa516944c3134d351048853278c

    • SSDEEP

      3072:cCZXtgABNBJ1BP5mUopW5KfTl6bmneDhZd31JHtb/B9:cedgABj3op+KrcrtZd31Ftb/B9

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks