Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

449db7ead2...5c.exe

windows7-x64

10

449db7ead2...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    449db7ead280736b0e7610b2a7a84e5c

  • Size

    332KB

  • Sample

    231225-3yt9ksaegp

  • MD5

    449db7ead280736b0e7610b2a7a84e5c

  • SHA1

    cb2fef6c9eda407dec841e107315e09e25ef21bb

  • SHA256

    13e7f4b66b74a37a78fae79a7d4a0267efb42d622d7a0a883ff7990fc4448613

  • SHA512

    ea4a8f5bc3c1a06c70c888014bfc5d42c6b26ecff99ad951f513890c0474651e7af759a3740a85ffdf6121307d8aacf63c90eced14e0858636bf5ca5812c9da1

  • SSDEEP

    3072:7q9jSeaNxnuD7mEVSuekhGkYrQRVZq3eFo4ejLnlQISQLpyhZu6qyKtrlbHrs2OI:L5NxM2WGk1Y3nmQcuyKdFrs2OXuHNz

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      449db7ead280736b0e7610b2a7a84e5c

    • Size

      332KB

    • MD5

      449db7ead280736b0e7610b2a7a84e5c

    • SHA1

      cb2fef6c9eda407dec841e107315e09e25ef21bb

    • SHA256

      13e7f4b66b74a37a78fae79a7d4a0267efb42d622d7a0a883ff7990fc4448613

    • SHA512

      ea4a8f5bc3c1a06c70c888014bfc5d42c6b26ecff99ad951f513890c0474651e7af759a3740a85ffdf6121307d8aacf63c90eced14e0858636bf5ca5812c9da1

    • SSDEEP

      3072:7q9jSeaNxnuD7mEVSuekhGkYrQRVZq3eFo4ejLnlQISQLpyhZu6qyKtrlbHrs2OI:L5NxM2WGk1Y3nmQcuyKdFrs2OXuHNz

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks