Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

14965113e9...3c.exe

windows7-x64

10

14965113e9...3c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14965113e96487385b7fb8e92589d53c

  • Size

    240KB

  • Sample

    231225-ljbegsghdj

  • MD5

    14965113e96487385b7fb8e92589d53c

  • SHA1

    67ea22147dbdbe345e337f14668ecbfe0a8307ec

  • SHA256

    1e4e8b73abbf3ab007aa94ad571953169d5d5dca375ee67e53660b182e3be7b5

  • SHA512

    c63ea867b2199ff3861a0765e279952b923655c2bcac6bb5d114b8e6bbe6304e5041fd1c1c98213094d6b265d8aaeefa42a31996b80663362cfd1e7d4212551d

  • SSDEEP

    3072:r6JoB8eFF+YupJ904AX+ipuvnHMC6Fz2Pa9VZumXYdVL63fZi8KGc333ygop+:ccFFk/at6PMFKa9VUuYdVL63fZNMF1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      14965113e96487385b7fb8e92589d53c

    • Size

      240KB

    • MD5

      14965113e96487385b7fb8e92589d53c

    • SHA1

      67ea22147dbdbe345e337f14668ecbfe0a8307ec

    • SHA256

      1e4e8b73abbf3ab007aa94ad571953169d5d5dca375ee67e53660b182e3be7b5

    • SHA512

      c63ea867b2199ff3861a0765e279952b923655c2bcac6bb5d114b8e6bbe6304e5041fd1c1c98213094d6b265d8aaeefa42a31996b80663362cfd1e7d4212551d

    • SSDEEP

      3072:r6JoB8eFF+YupJ904AX+ipuvnHMC6Fz2Pa9VZumXYdVL63fZi8KGc333ygop+:ccFFk/at6PMFKa9VUuYdVL63fZNMF1

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks