Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

169770d1b3...2d.exe

windows7-x64

6

169770d1b3...2d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    169770d1b39686dba1237519ab827a2d

  • Size

    42KB

  • Sample

    231230-m3djmafgb5

  • MD5

    169770d1b39686dba1237519ab827a2d

  • SHA1

    fb5352912ffff67cea1afe02c38a7e19993d7851

  • SHA256

    fc39d9f91900bed78a83835b43cdc19375e3278a3878ebfd5bf6e4f5b94d1839

  • SHA512

    d2fe537125dd519437de12224d679ef044902abf03bb0185b1288f9f8bd900bb56ce18fc8fb8cee19219e643ed942ad5efe1269c4a97716be632dcc43daa427d

  • SSDEEP

    768:n+WwQOIEXqFsVSNAB8pz7T8RQYHhplSm8IIYkYDgn7Tf241WJkBI:+odIqcMA6tTFwpkP7Ykn248J3

Score
8/10
persistence

Malware Config

Targets

    • Target

      169770d1b39686dba1237519ab827a2d

    • Size

      42KB

    • MD5

      169770d1b39686dba1237519ab827a2d

    • SHA1

      fb5352912ffff67cea1afe02c38a7e19993d7851

    • SHA256

      fc39d9f91900bed78a83835b43cdc19375e3278a3878ebfd5bf6e4f5b94d1839

    • SHA512

      d2fe537125dd519437de12224d679ef044902abf03bb0185b1288f9f8bd900bb56ce18fc8fb8cee19219e643ed942ad5efe1269c4a97716be632dcc43daa427d

    • SSDEEP

      768:n+WwQOIEXqFsVSNAB8pz7T8RQYHhplSm8IIYkYDgn7Tf241WJkBI:+odIqcMA6tTFwpkP7Ykn248J3

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks