Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

pharmacy_3...08.exe

windows7-x64

7

pharmacy_3...08.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pharmacy_3_0_160808.exe

  • Size

    17.9MB

  • Sample

    230614-p5a8dshc26

  • MD5

    e075a2ae385e716722636d43deba48a5

  • SHA1

    8bbde4c30a63dce4f27da9a95f950bee9022da3e

  • SHA256

    dc0bba54dc123ee0d029d0b7cfb2cbd0666417203cad460d9d42a60a0e736bcf

  • SHA512

    3b643a02729fc43291278b59cb847ca993083aac676b94499a4f6aef5ca3e7ce4ea1e125c7523a4b1d448fb3762386dbd9cffa5f76e0417100a3d1bdc4a11baf

  • SSDEEP

    393216:qBLmbGbT1uyHwb5TZgfGbrw4s/fxCS9PZv6GPdo/hJS+5lixTmmQTq5lAW:8miVuywbcgrw4u5bZS0mNlcSiXAW

Score
7/10

Malware Config

Targets

    • Target

      pharmacy_3_0_160808.exe

    • Size

      17.9MB

    • MD5

      e075a2ae385e716722636d43deba48a5

    • SHA1

      8bbde4c30a63dce4f27da9a95f950bee9022da3e

    • SHA256

      dc0bba54dc123ee0d029d0b7cfb2cbd0666417203cad460d9d42a60a0e736bcf

    • SHA512

      3b643a02729fc43291278b59cb847ca993083aac676b94499a4f6aef5ca3e7ce4ea1e125c7523a4b1d448fb3762386dbd9cffa5f76e0417100a3d1bdc4a11baf

    • SSDEEP

      393216:qBLmbGbT1uyHwb5TZgfGbrw4s/fxCS9PZv6GPdo/hJS+5lixTmmQTq5lAW:8miVuywbcgrw4u5bZS0mNlcSiXAW

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks