Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

0dbf4a53a7...ef.exe

windows7-x64

8

0dbf4a53a7...ef.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dbf4a53a709516a9c1c362fd727b7ef

  • Size

    649KB

  • Sample

    231230-eleflaggcn

  • MD5

    0dbf4a53a709516a9c1c362fd727b7ef

  • SHA1

    bdc9a44903c006b3b86797e715f46d3930365e79

  • SHA256

    2be652d5bf6494a329b2a1087b7c8d27030c974d69a115924466a217d5cee517

  • SHA512

    1a5c010df670ce162c574616c9a7a9309e09d3efbedf3a7846c9420a7dbb8c59a375348828cc16b93b9fbf4e88db401dd37ea322a1b57f71d2fbbcd98ed4486e

  • SSDEEP

    12288:gREX7F/rNTTCY1ZfFZueHVtxnW7xRypQLR2+huboz:gRO7lP1ZdfH9wRcQLR2bUz

Score
8/10
persistence

Malware Config

Targets

    • Target

      0dbf4a53a709516a9c1c362fd727b7ef

    • Size

      649KB

    • MD5

      0dbf4a53a709516a9c1c362fd727b7ef

    • SHA1

      bdc9a44903c006b3b86797e715f46d3930365e79

    • SHA256

      2be652d5bf6494a329b2a1087b7c8d27030c974d69a115924466a217d5cee517

    • SHA512

      1a5c010df670ce162c574616c9a7a9309e09d3efbedf3a7846c9420a7dbb8c59a375348828cc16b93b9fbf4e88db401dd37ea322a1b57f71d2fbbcd98ed4486e

    • SSDEEP

      12288:gREX7F/rNTTCY1ZfFZueHVtxnW7xRypQLR2+huboz:gRO7lP1ZdfH9wRcQLR2bUz

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks