Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

3975ff2aa7...8c.exe

windows7-x64

8

3975ff2aa7...8c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3975ff2aa7b5d7b9e15c411bf1501c8c

  • Size

    20KB

  • Sample

    231225-ymjw9afgb7

  • MD5

    3975ff2aa7b5d7b9e15c411bf1501c8c

  • SHA1

    b5555fb6bda3ddc24924c49c254a6d6e44a82ba3

  • SHA256

    4d8ee5361e4b6544235d0664b01974807032fbe6b801272b00387c7095284ce5

  • SHA512

    cc1e412cbabfe02a8bd76aadb5bd649b46ccba8be5dbeaa62f611c89acfa35beaf1c2bc2dad867335ebe566ef5e39a0301901978a9af849ca314921b9275d28d

  • SSDEEP

    192:1l5E3krTuntKy0peHDfCpHfBv+I4QwXt9V+jqu0G5KDJBWXhg:1M3PnQoHDCpHf4I4Qwdc0G5KDJ8g

Score
8/10

Malware Config

Targets

    • Target

      3975ff2aa7b5d7b9e15c411bf1501c8c

    • Size

      20KB

    • MD5

      3975ff2aa7b5d7b9e15c411bf1501c8c

    • SHA1

      b5555fb6bda3ddc24924c49c254a6d6e44a82ba3

    • SHA256

      4d8ee5361e4b6544235d0664b01974807032fbe6b801272b00387c7095284ce5

    • SHA512

      cc1e412cbabfe02a8bd76aadb5bd649b46ccba8be5dbeaa62f611c89acfa35beaf1c2bc2dad867335ebe566ef5e39a0301901978a9af849ca314921b9275d28d

    • SSDEEP

      192:1l5E3krTuntKy0peHDfCpHfBv+I4QwXt9V+jqu0G5KDJBWXhg:1M3PnQoHDCpHf4I4Qwdc0G5KDJ8g

    Score
    8/10

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks