Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

0ca461ccc0...8e.exe

windows7-x64

8

0ca461ccc0...8e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ca461ccc043c477bbd01eb56c5a278e

  • Size

    356KB

  • Sample

    231230-drcnhsabam

  • MD5

    0ca461ccc043c477bbd01eb56c5a278e

  • SHA1

    3931aee44b284b6175bde640e3297f00db12c011

  • SHA256

    40a2e0f00ccf67a73b04807f991c1d3e503a6680ea5580410b489dbe2daf8c2b

  • SHA512

    d1e4636a67f01ed4b98a82afa425b4cd883a28b5ebf100d6eb41a42bea9500362e1dddaad2b8f7642b995240b77bfedd522dd3d779459ed4dd9a2d3af4b91f42

  • SSDEEP

    6144:Fu2urzh9xu/XkauF5JgrFuaufWG7JbOB4Dklhd8r3AXX2z+2FB8+iTJiPUbVxXRQ:Futrzh9xOXkWrJufWG7KlaAnUfiTJSS0

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      0ca461ccc043c477bbd01eb56c5a278e

    • Size

      356KB

    • MD5

      0ca461ccc043c477bbd01eb56c5a278e

    • SHA1

      3931aee44b284b6175bde640e3297f00db12c011

    • SHA256

      40a2e0f00ccf67a73b04807f991c1d3e503a6680ea5580410b489dbe2daf8c2b

    • SHA512

      d1e4636a67f01ed4b98a82afa425b4cd883a28b5ebf100d6eb41a42bea9500362e1dddaad2b8f7642b995240b77bfedd522dd3d779459ed4dd9a2d3af4b91f42

    • SSDEEP

      6144:Fu2urzh9xu/XkauF5JgrFuaufWG7JbOB4Dklhd8r3AXX2z+2FB8+iTJiPUbVxXRQ:Futrzh9xOXkWrJufWG7KlaAnUfiTJSS0

    Score
    8/10
    evasionpersistence

    • Creates new service(s)

      persistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks