Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

01ab435fea...86.exe

windows7-x64

10

01ab435fea...86.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01ab435feaef006adef71503c8c45186.exe

  • Size

    48KB

  • Sample

    231230-vyjtvaddc2

  • MD5

    01ab435feaef006adef71503c8c45186

  • SHA1

    b8323754af1f8c640046b058760aac1f9f72d937

  • SHA256

    b506504cfe3cc382536afd2fe8418e665a823ac5f084ffca6c2c7730c565cfd6

  • SHA512

    3abd6ff3798710dced1b60ae152adfa8fbf2616f1c681caea823df80dbf95f03ac9b06b5d0bcaa688a614c14a7814beb06f960eff1b9e5fa0b2e3bf5f33b87a8

  • SSDEEP

    768:xJNEhmygKOyEv+6wH9H7MfygXaDMFQXD7e:xJamgOh6NNDsQXD7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      01ab435feaef006adef71503c8c45186.exe

    • Size

      48KB

    • MD5

      01ab435feaef006adef71503c8c45186

    • SHA1

      b8323754af1f8c640046b058760aac1f9f72d937

    • SHA256

      b506504cfe3cc382536afd2fe8418e665a823ac5f084ffca6c2c7730c565cfd6

    • SHA512

      3abd6ff3798710dced1b60ae152adfa8fbf2616f1c681caea823df80dbf95f03ac9b06b5d0bcaa688a614c14a7814beb06f960eff1b9e5fa0b2e3bf5f33b87a8

    • SSDEEP

      768:xJNEhmygKOyEv+6wH9H7MfygXaDMFQXD7e:xJamgOh6NNDsQXD7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks