Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

062e12008a...8c.exe

windows7-x64

10

062e12008a...8c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    062e12008afd33f39718db8a21b2128c

  • Size

    292KB

  • Sample

    231225-fgyjcaaeeq

  • MD5

    062e12008afd33f39718db8a21b2128c

  • SHA1

    4063cedbca0bc470735f458fe02dc0f6fe92a814

  • SHA256

    19efe0ad042bcb1e27679f9c9b20d02106ac01c73a87593e25f7ad5d57eecea7

  • SHA512

    88f81b77d260d1d6df050aeb21c4a8b648fcaad196d84b5009d0a1b41ecb0dae2bffaedb3fa6431e9dd79881bc85f4c61ea2c3cb2af2c6b959e6f1eab701fc36

  • SSDEEP

    6144:tuYlw9OOaUP9VO3oTUX5K/fObT/bGilTBpSthkZ7xCrLOzpqnI3YxZkoVvdB:thlw9eUV03owX5K/fObT/bGi4hkZ7xC9

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      062e12008afd33f39718db8a21b2128c

    • Size

      292KB

    • MD5

      062e12008afd33f39718db8a21b2128c

    • SHA1

      4063cedbca0bc470735f458fe02dc0f6fe92a814

    • SHA256

      19efe0ad042bcb1e27679f9c9b20d02106ac01c73a87593e25f7ad5d57eecea7

    • SHA512

      88f81b77d260d1d6df050aeb21c4a8b648fcaad196d84b5009d0a1b41ecb0dae2bffaedb3fa6431e9dd79881bc85f4c61ea2c3cb2af2c6b959e6f1eab701fc36

    • SSDEEP

      6144:tuYlw9OOaUP9VO3oTUX5K/fObT/bGilTBpSthkZ7xCrLOzpqnI3YxZkoVvdB:thlw9eUV03owX5K/fObT/bGi4hkZ7xC9

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks