Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

791a065100...a4.exe

windows7-x64

8

791a065100...a4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    791a065100c559c0e1a0bcd532187fa4

  • Size

    17KB

  • Sample

    240127-dhplqadccr

  • MD5

    791a065100c559c0e1a0bcd532187fa4

  • SHA1

    be3ec5c18f9a94012d52003b6094c54c70df6215

  • SHA256

    b9395207132a0756c4aae8a363bf72620322ac3c7504edae154f7c2453a1137c

  • SHA512

    838fb8919adc8bf3146cc163df1ecb512930db10eb04b456866766a37f8f176f0483c8ba6fcce36e64165f71154499acad26c51acc8741a5c211e2f1682852bf

  • SSDEEP

    384:RFdo0Ak3cmZO2Zp+Nye8pqrmub8TyztsDN:Rbuk3oKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      791a065100c559c0e1a0bcd532187fa4

    • Size

      17KB

    • MD5

      791a065100c559c0e1a0bcd532187fa4

    • SHA1

      be3ec5c18f9a94012d52003b6094c54c70df6215

    • SHA256

      b9395207132a0756c4aae8a363bf72620322ac3c7504edae154f7c2453a1137c

    • SHA512

      838fb8919adc8bf3146cc163df1ecb512930db10eb04b456866766a37f8f176f0483c8ba6fcce36e64165f71154499acad26c51acc8741a5c211e2f1682852bf

    • SSDEEP

      384:RFdo0Ak3cmZO2Zp+Nye8pqrmub8TyztsDN:Rbuk3oKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks