Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

a93f49cdec...a5.exe

windows7-x64

10

a93f49cdec...a5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a93f49cdecf6e3a1002286682f19a3a5

  • Size

    60KB

  • Sample

    231222-qydwdadbd4

  • MD5

    a93f49cdecf6e3a1002286682f19a3a5

  • SHA1

    fa4f4e951a27cb3ce178a09214c9be71d63519fb

  • SHA256

    fbe71273f4f34f65257a80646574b6951d3566799ffe2531353c0bb01a9a79a6

  • SHA512

    1639fab5d3a2a2296c9310d7ed00652f1073f59da332ff2371ad67870cccbf9e9cd3844c4cb4296cde5fba3bda6eaa9387b8e66ba3d9fdaff2b1d04e5a2c7523

  • SSDEEP

    768:hXSmpnBmNVpmkeu76+9A/v/bVlbdfs3OfKDHGIHY56W7:hXSNp+u76y43wY56W7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a93f49cdecf6e3a1002286682f19a3a5

    • Size

      60KB

    • MD5

      a93f49cdecf6e3a1002286682f19a3a5

    • SHA1

      fa4f4e951a27cb3ce178a09214c9be71d63519fb

    • SHA256

      fbe71273f4f34f65257a80646574b6951d3566799ffe2531353c0bb01a9a79a6

    • SHA512

      1639fab5d3a2a2296c9310d7ed00652f1073f59da332ff2371ad67870cccbf9e9cd3844c4cb4296cde5fba3bda6eaa9387b8e66ba3d9fdaff2b1d04e5a2c7523

    • SSDEEP

      768:hXSmpnBmNVpmkeu76+9A/v/bVlbdfs3OfKDHGIHY56W7:hXSNp+u76y43wY56W7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks