Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

f2108f5794...a3.exe

windows7-x64

8

f2108f5794...a3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2108f579489cf70ad58ef411029cb794d1d491652a563eb08b79c4279075fa3

  • Size

    4.3MB

  • Sample

    231022-d5jzraeh94

  • MD5

    6f100fd99236d88d87408239b808695d

  • SHA1

    8c8a22a6c5274285ef86308fcea772407b7dcb1c

  • SHA256

    f2108f579489cf70ad58ef411029cb794d1d491652a563eb08b79c4279075fa3

  • SHA512

    7fc3b46eafec82359c0bf539cb8bf798f9f2f9dcc956d44cb37c5313e91b16aff3ef6964418d4485400a6ea24094d7651c8dff382312335f733b9b1440970008

  • SSDEEP

    49152:OQ6nZ5QZuTtS0rQMYOQ+q8CEvQ6ngQ6nx9KFeMkFd////z9qw:B6ZWsM0r1QnJ6X6x0FefFd////z9qw

Score
8/10
aspackv2

Malware Config

Targets

    • Target

      f2108f579489cf70ad58ef411029cb794d1d491652a563eb08b79c4279075fa3

    • Size

      4.3MB

    • MD5

      6f100fd99236d88d87408239b808695d

    • SHA1

      8c8a22a6c5274285ef86308fcea772407b7dcb1c

    • SHA256

      f2108f579489cf70ad58ef411029cb794d1d491652a563eb08b79c4279075fa3

    • SHA512

      7fc3b46eafec82359c0bf539cb8bf798f9f2f9dcc956d44cb37c5313e91b16aff3ef6964418d4485400a6ea24094d7651c8dff382312335f733b9b1440970008

    • SSDEEP

      49152:OQ6nZ5QZuTtS0rQMYOQ+q8CEvQ6ngQ6nx9KFeMkFd////z9qw:B6ZWsM0r1QnJ6X6x0FefFd////z9qw

    Score
    8/10

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks