Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

3a4509b9b9...bf.exe

windows7-x64

8

3a4509b9b9...bf.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a4509b9b97b571c302edcb211b38fbf

  • Size

    144KB

  • Sample

    231225-ywp5maffbk

  • MD5

    3a4509b9b97b571c302edcb211b38fbf

  • SHA1

    186967981ddf2c93287a8b834027974ab146caf4

  • SHA256

    5adbd37afeff1028ecea8a71ca31464461304d33f1220b80d99632c5a4453f91

  • SHA512

    6862861210bedd986f1d77e03bd4afad29a930ec2bd9f7bb1178ca509afa2eb4d0bcb8407305ab6b574f48c6dd7fae10b4b1b2e9bbc94c05d3b06ff826ca0cec

  • SSDEEP

    1536:RwkqP1/1yo0Wnchx/X+07DDpFlgYrhp7gX4XFv3AVrlFIS39/oLa:RvqPx1CmchE0PDvhp7i4VvQvFX39/b

Score
8/10

Malware Config

Targets

    • Target

      3a4509b9b97b571c302edcb211b38fbf

    • Size

      144KB

    • MD5

      3a4509b9b97b571c302edcb211b38fbf

    • SHA1

      186967981ddf2c93287a8b834027974ab146caf4

    • SHA256

      5adbd37afeff1028ecea8a71ca31464461304d33f1220b80d99632c5a4453f91

    • SHA512

      6862861210bedd986f1d77e03bd4afad29a930ec2bd9f7bb1178ca509afa2eb4d0bcb8407305ab6b574f48c6dd7fae10b4b1b2e9bbc94c05d3b06ff826ca0cec

    • SSDEEP

      1536:RwkqP1/1yo0Wnchx/X+07DDpFlgYrhp7gX4XFv3AVrlFIS39/oLa:RvqPx1CmchE0PDvhp7i4VvQvFX39/b

    Score
    8/10

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks