Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

032ee51833...3a.exe

windows7-x64

10

032ee51833...3a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    032ee518339bc35f1f173a29b105223a

  • Size

    232KB

  • Sample

    231225-d2q9naafan

  • MD5

    032ee518339bc35f1f173a29b105223a

  • SHA1

    3c0fe54528a768d1e22f14e0be4b2864c0911fd0

  • SHA256

    8f9a34842656bb5d15f2be00582723e641eb7d9208e3c34569108e4d8da34f00

  • SHA512

    f6baf47bbdab3a50476025edef78c0ba608e9ba9a758dce6368b73a590c387e721b53eba759a05ce9200e8b55c490131f11612eca1fefaae9ee9bd89c91a4761

  • SSDEEP

    3072:dccx9+/Qwpvznz1NK/z1WdAwKh4aqosAm+wlO:qNz1NK/zEdBKh4aqosAm+w0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      032ee518339bc35f1f173a29b105223a

    • Size

      232KB

    • MD5

      032ee518339bc35f1f173a29b105223a

    • SHA1

      3c0fe54528a768d1e22f14e0be4b2864c0911fd0

    • SHA256

      8f9a34842656bb5d15f2be00582723e641eb7d9208e3c34569108e4d8da34f00

    • SHA512

      f6baf47bbdab3a50476025edef78c0ba608e9ba9a758dce6368b73a590c387e721b53eba759a05ce9200e8b55c490131f11612eca1fefaae9ee9bd89c91a4761

    • SSDEEP

      3072:dccx9+/Qwpvznz1NK/z1WdAwKh4aqosAm+wlO:qNz1NK/zEdBKh4aqosAm+w0

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks