Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

440e4c9530...58.exe

windows7-x64

10

440e4c9530...58.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    440e4c9530f309b8d3fa239ca4fb9e58

  • Size

    232KB

  • Sample

    231225-3rbhwsbag2

  • MD5

    440e4c9530f309b8d3fa239ca4fb9e58

  • SHA1

    2ff64f58200eb602d3a8fc7ce1c2d9d6cf2291b6

  • SHA256

    26a60290b145ace56ebfe219e3868aa632e00a438fb0328e427f06531f9b5ee2

  • SHA512

    8c7c55e481a8f031cb910e736ca773b44c81cec6199d54360f373c87706e66495eea65bd148984d05d2a4d5a19f4e278d04a4f0e6d0ec4278695d364aaa1c3e2

  • SSDEEP

    6144:/C3PFKs7STL6eEqxF6snji81RUinKn3Kt+dNF1FE:YPhPDFfE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      440e4c9530f309b8d3fa239ca4fb9e58

    • Size

      232KB

    • MD5

      440e4c9530f309b8d3fa239ca4fb9e58

    • SHA1

      2ff64f58200eb602d3a8fc7ce1c2d9d6cf2291b6

    • SHA256

      26a60290b145ace56ebfe219e3868aa632e00a438fb0328e427f06531f9b5ee2

    • SHA512

      8c7c55e481a8f031cb910e736ca773b44c81cec6199d54360f373c87706e66495eea65bd148984d05d2a4d5a19f4e278d04a4f0e6d0ec4278695d364aaa1c3e2

    • SSDEEP

      6144:/C3PFKs7STL6eEqxF6snji81RUinKn3Kt+dNF1FE:YPhPDFfE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks