Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

181e3cfa9e...20.exe

windows7-x64

8

181e3cfa9e...20.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    181e3cfa9e8cbffaf87ec8d02e6a7020

  • Size

    191KB

  • Sample

    231225-mstsvshda3

  • MD5

    181e3cfa9e8cbffaf87ec8d02e6a7020

  • SHA1

    c544710ac9fb655f8abb059a7f8ae04c3606c2c3

  • SHA256

    c6e3089448b381cd296f85148257a61a75a3f69e6e726c7015cdf433145d1336

  • SHA512

    5b9efa2cf0afe564e55ffb47953c730d9363b1c559aaff72b90a04a1ee4e796126034be4995289e2132dbc14498ab6496f1db3c7f58cbd74c20f7b134884f09b

  • SSDEEP

    3072:3/na6WDmrZ5Cn79xvlr2xmOJ5wUuWXcfb0hw7IACb873684yVcx566/znwVT8I0k:3/nuDm9knmhJ4/sMLuO6/zCg9a

Score
8/10

Malware Config

Targets

    • Target

      181e3cfa9e8cbffaf87ec8d02e6a7020

    • Size

      191KB

    • MD5

      181e3cfa9e8cbffaf87ec8d02e6a7020

    • SHA1

      c544710ac9fb655f8abb059a7f8ae04c3606c2c3

    • SHA256

      c6e3089448b381cd296f85148257a61a75a3f69e6e726c7015cdf433145d1336

    • SHA512

      5b9efa2cf0afe564e55ffb47953c730d9363b1c559aaff72b90a04a1ee4e796126034be4995289e2132dbc14498ab6496f1db3c7f58cbd74c20f7b134884f09b

    • SSDEEP

      3072:3/na6WDmrZ5Cn79xvlr2xmOJ5wUuWXcfb0hw7IACb873684yVcx566/znwVT8I0k:3/nuDm9knmhJ4/sMLuO6/zCg9a

    Score
    8/10

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks