Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

46566c1cdc...72.exe

windows7-x64

10

46566c1cdc...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46566c1cdccbc22114b3c265105bb172

  • Size

    132KB

  • Sample

    240106-qm1wrshbek

  • MD5

    46566c1cdccbc22114b3c265105bb172

  • SHA1

    279218e1d1e8051a7919185d25d41a20f7f6b731

  • SHA256

    51a0cc89a099b2a5f4e6f49d6bb3a00d4661b9bfab8353a04ea4aed1f5568200

  • SHA512

    cfafed5e16584dcfc1d307f50991bd2a9bd49c999f9db7ac9f502d187c422d6316f46d5842be90b12ca433ea1c449140c4fd813c223368e6eb84906c9cc3ce9c

  • SSDEEP

    1536:y+kKp/4inMnzzMcVVnEGKbfSG7Gtg3sZnFE+t+:9ke/nMnz4cVVnEGi53aFEe+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      46566c1cdccbc22114b3c265105bb172

    • Size

      132KB

    • MD5

      46566c1cdccbc22114b3c265105bb172

    • SHA1

      279218e1d1e8051a7919185d25d41a20f7f6b731

    • SHA256

      51a0cc89a099b2a5f4e6f49d6bb3a00d4661b9bfab8353a04ea4aed1f5568200

    • SHA512

      cfafed5e16584dcfc1d307f50991bd2a9bd49c999f9db7ac9f502d187c422d6316f46d5842be90b12ca433ea1c449140c4fd813c223368e6eb84906c9cc3ce9c

    • SSDEEP

      1536:y+kKp/4inMnzzMcVVnEGKbfSG7Gtg3sZnFE+t+:9ke/nMnz4cVVnEGi53aFEe+

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks