Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ef5e8f6f49...70.exe

windows7-x64

10

ef5e8f6f49...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef5e8f6f4944c9b9a7337c50be395070.exe

  • Size

    92KB

  • Sample

    240109-xcpt3sgaen

  • MD5

    ef5e8f6f4944c9b9a7337c50be395070

  • SHA1

    cf2cb4e5f705043b8fc6f2d962128a08a345a7da

  • SHA256

    715c181d49d1d0bc6ebeca610899357085ddab5417fec2c634a892c308453896

  • SHA512

    a45a600a05e58d60ea064a636a81ef478575b7dcdc91009bd6e6f456abd215750a8910d3a2cdb87dd1430ae0e60ac2d1b19de241b0eeae2ccb1feeae4eadb0e5

  • SSDEEP

    1536:5nbcxJWBy5jOJPGwMdKhwjzgnv/dvyvJvSvbvfvLMPHprna:FqJeoauIMP5a

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ef5e8f6f4944c9b9a7337c50be395070.exe

    • Size

      92KB

    • MD5

      ef5e8f6f4944c9b9a7337c50be395070

    • SHA1

      cf2cb4e5f705043b8fc6f2d962128a08a345a7da

    • SHA256

      715c181d49d1d0bc6ebeca610899357085ddab5417fec2c634a892c308453896

    • SHA512

      a45a600a05e58d60ea064a636a81ef478575b7dcdc91009bd6e6f456abd215750a8910d3a2cdb87dd1430ae0e60ac2d1b19de241b0eeae2ccb1feeae4eadb0e5

    • SSDEEP

      1536:5nbcxJWBy5jOJPGwMdKhwjzgnv/dvyvJvSvbvfvLMPHprna:FqJeoauIMP5a

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks