Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0a30b6a4b9...d5.exe

windows7-x64

10

0a30b6a4b9...d5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a30b6a4b96947529fb6093a26a896d5

  • Size

    228KB

  • Sample

    231225-gsr2dacee7

  • MD5

    0a30b6a4b96947529fb6093a26a896d5

  • SHA1

    4f6f4c21d1c5d058e7e3bba43e21782b9d6d0df4

  • SHA256

    60671cc6fa126b667c80e26f47e1b95376d4927b24a091214ca11eceb0177e76

  • SHA512

    60ba8d3e5c446d4e192d6fd7d874df43b9037f9526709c95c9d734272ea44c295231740a6ab30f3f02d919072b50f14b8e27c5f8cc824debd5e81e502658945d

  • SSDEEP

    6144:lmMfx3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/7SK:lmMf9PhAmZIH+7r

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0a30b6a4b96947529fb6093a26a896d5

    • Size

      228KB

    • MD5

      0a30b6a4b96947529fb6093a26a896d5

    • SHA1

      4f6f4c21d1c5d058e7e3bba43e21782b9d6d0df4

    • SHA256

      60671cc6fa126b667c80e26f47e1b95376d4927b24a091214ca11eceb0177e76

    • SHA512

      60ba8d3e5c446d4e192d6fd7d874df43b9037f9526709c95c9d734272ea44c295231740a6ab30f3f02d919072b50f14b8e27c5f8cc824debd5e81e502658945d

    • SSDEEP

      6144:lmMfx3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/7SK:lmMf9PhAmZIH+7r

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks