Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

86a04abc43...16.exe

windows7-x64

10

86a04abc43...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86a04abc43302367987d735d1eec7516

  • Size

    220KB

  • Sample

    240201-l7pa9acecq

  • MD5

    86a04abc43302367987d735d1eec7516

  • SHA1

    a356c4cbe79222dc47a056501451cde8c3076420

  • SHA256

    7860d54f57f84f573dc8cc8b11bad483ebbe837bfef58d944ef46ac22d9be921

  • SHA512

    e12f9f2889bd3df7f269938367af0eab47b40d48fa46203ca832586e305f4cee34e453ecea026c569d4e6264eb3c91a2ed408f26b1a832a69d130644985787ad

  • SSDEEP

    3072:pexoX87v9mBhYlhgywlp2cQlftSymTlUMvCI2Zxo0:pexos+p2cQULlUzDx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      86a04abc43302367987d735d1eec7516

    • Size

      220KB

    • MD5

      86a04abc43302367987d735d1eec7516

    • SHA1

      a356c4cbe79222dc47a056501451cde8c3076420

    • SHA256

      7860d54f57f84f573dc8cc8b11bad483ebbe837bfef58d944ef46ac22d9be921

    • SHA512

      e12f9f2889bd3df7f269938367af0eab47b40d48fa46203ca832586e305f4cee34e453ecea026c569d4e6264eb3c91a2ed408f26b1a832a69d130644985787ad

    • SSDEEP

      3072:pexoX87v9mBhYlhgywlp2cQlftSymTlUMvCI2Zxo0:pexos+p2cQULlUzDx

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks