Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5029d9a000...fd.exe

windows7-x64

10

5029d9a000...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5029d9a00076d872554ef78a72efdbfd

  • Size

    188KB

  • Sample

    231226-dy6j6sfbfp

  • MD5

    5029d9a00076d872554ef78a72efdbfd

  • SHA1

    d1a3515f11a6b32329f60de36a04ee1a91258987

  • SHA256

    40cfa435fd110dab8827b4bb9ea2531a65877cdee9738091e709ce295330d038

  • SHA512

    a446594f7907aeb99aac1bb5589972e4ea6930f401ce01a21fd8cc6dbf0ba4d892ab0ba1ec4ea5fc38dad1248b320f14652e82966e510083e28a4fb593f7bf38

  • SSDEEP

    3072:Tj4dM3y6QqQ7b4zxMJsSmJLnTQFlKRilqoq6v/:QxhqM4zk0dqfMot

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5029d9a00076d872554ef78a72efdbfd

    • Size

      188KB

    • MD5

      5029d9a00076d872554ef78a72efdbfd

    • SHA1

      d1a3515f11a6b32329f60de36a04ee1a91258987

    • SHA256

      40cfa435fd110dab8827b4bb9ea2531a65877cdee9738091e709ce295330d038

    • SHA512

      a446594f7907aeb99aac1bb5589972e4ea6930f401ce01a21fd8cc6dbf0ba4d892ab0ba1ec4ea5fc38dad1248b320f14652e82966e510083e28a4fb593f7bf38

    • SSDEEP

      3072:Tj4dM3y6QqQ7b4zxMJsSmJLnTQFlKRilqoq6v/:QxhqM4zk0dqfMot

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks