Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

1a0c49762a...8f.exe

windows7-x64

8

1a0c49762a...8f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a0c49762a357df79e0150b84c64008f

  • Size

    17KB

  • Sample

    231230-qrlbwabgb4

  • MD5

    1a0c49762a357df79e0150b84c64008f

  • SHA1

    fe4d56b9d690b1b72389adc5629e564e78b7f354

  • SHA256

    644e7086d7d7479701a0e7cb01f3dc0bd1769a38183377441b389b8d69e265d7

  • SHA512

    375a51c41e7b6c8d42c82e64d84de8625791bc550a61d227cd8f1030fd8578c466610973bf7bdedea27d2b8a785751a2e108e3c36f517e5fa93b71ff921ae057

  • SSDEEP

    384:3FD2mUktcmZO2Zp+Nye8pqrmub8TyztsDN:3tyktoKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      1a0c49762a357df79e0150b84c64008f

    • Size

      17KB

    • MD5

      1a0c49762a357df79e0150b84c64008f

    • SHA1

      fe4d56b9d690b1b72389adc5629e564e78b7f354

    • SHA256

      644e7086d7d7479701a0e7cb01f3dc0bd1769a38183377441b389b8d69e265d7

    • SHA512

      375a51c41e7b6c8d42c82e64d84de8625791bc550a61d227cd8f1030fd8578c466610973bf7bdedea27d2b8a785751a2e108e3c36f517e5fa93b71ff921ae057

    • SSDEEP

      384:3FD2mUktcmZO2Zp+Nye8pqrmub8TyztsDN:3tyktoKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks