Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

141fff49f3...41.exe

windows7-x64

10

141fff49f3...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    141fff49f3c43b14d0e597cdd7563b41

  • Size

    244KB

  • Sample

    231225-k8hpeshba8

  • MD5

    141fff49f3c43b14d0e597cdd7563b41

  • SHA1

    5fc618279814a05fca3c083b4155fc6b0e1bba77

  • SHA256

    199af3247f010ba14f088d08433b75bd5376a3016829157dbf4942bc2e3ff5bb

  • SHA512

    8c51ac77484d527a9e4b7785db72f921628096822e5928ea54284bb35d8b249f8b5511963bee1b5a2b06dbe8bcf054b705e25675e4ee020f23271f9adb818ee5

  • SSDEEP

    3072:8jYMSAOVRMcy1imsW7A0g3XDYHYTvZm3ov5Q4/cMIVH5bEvhSSqeLSqnjeD:er7KRFy1imdJgc4s2QRhH5IX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      141fff49f3c43b14d0e597cdd7563b41

    • Size

      244KB

    • MD5

      141fff49f3c43b14d0e597cdd7563b41

    • SHA1

      5fc618279814a05fca3c083b4155fc6b0e1bba77

    • SHA256

      199af3247f010ba14f088d08433b75bd5376a3016829157dbf4942bc2e3ff5bb

    • SHA512

      8c51ac77484d527a9e4b7785db72f921628096822e5928ea54284bb35d8b249f8b5511963bee1b5a2b06dbe8bcf054b705e25675e4ee020f23271f9adb818ee5

    • SSDEEP

      3072:8jYMSAOVRMcy1imsW7A0g3XDYHYTvZm3ov5Q4/cMIVH5bEvhSSqeLSqnjeD:er7KRFy1imdJgc4s2QRhH5IX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks