Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

02e79a2037...75.exe

windows7-x64

10

02e79a2037...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02e79a2037e12938390848af1f38cc75

  • Size

    176KB

  • Sample

    231225-dyr2sabah6

  • MD5

    02e79a2037e12938390848af1f38cc75

  • SHA1

    3b81b7492a7c677c742067b8060e088bf14300c2

  • SHA256

    1d03b2a5365f07b3f46db39b8e6d5d676894720c496c82b2a768da3b560df2d9

  • SHA512

    4e144b826935e8a6bf3d55112ac1a9199e2371df3b997a57f77f9b157c62e87611a32c0bcbd880c8e77471a28541fbdb6dbbd1f20e116b035e0dca1d79e8d0ce

  • SSDEEP

    3072:QC1IrKk+gj2HsfyKnvmb7/D26zjlBvWlzPpsPfIQ8sqLELTS55pMzcUK1eUyGei:/k+1Knvmb7/D26zjlBvWhPpsPfIQ8sq5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      02e79a2037e12938390848af1f38cc75

    • Size

      176KB

    • MD5

      02e79a2037e12938390848af1f38cc75

    • SHA1

      3b81b7492a7c677c742067b8060e088bf14300c2

    • SHA256

      1d03b2a5365f07b3f46db39b8e6d5d676894720c496c82b2a768da3b560df2d9

    • SHA512

      4e144b826935e8a6bf3d55112ac1a9199e2371df3b997a57f77f9b157c62e87611a32c0bcbd880c8e77471a28541fbdb6dbbd1f20e116b035e0dca1d79e8d0ce

    • SSDEEP

      3072:QC1IrKk+gj2HsfyKnvmb7/D26zjlBvWlzPpsPfIQ8sqLELTS55pMzcUK1eUyGei:/k+1Knvmb7/D26zjlBvWhPpsPfIQ8sq5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks