Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

8e3e5c7d35...16.exe

windows7-x64

8

8e3e5c7d35...16.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e3e5c7d35292d44a4e18b20100e2f16

  • Size

    17KB

  • Sample

    240204-fcssascbfn

  • MD5

    8e3e5c7d35292d44a4e18b20100e2f16

  • SHA1

    066fc0528076b761ca904ec532f9c7edfdf173db

  • SHA256

    c0f9d481ea247a35d2328da50cbba1fe1196c6c215beeeab1e1962419d34b5bc

  • SHA512

    db6b64c9e7a0b4333439652fc1a4fadb8ba2b7c745759dd7575f6499d32bbe40d77cbd1cd4ea4a441c88c2c2e2a25291021b138979170704bf2258daa351348a

  • SSDEEP

    384:VF5OC3EPcmZO2Zp+Nye8pqrmub8TyztsDN:VLZEPoKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      8e3e5c7d35292d44a4e18b20100e2f16

    • Size

      17KB

    • MD5

      8e3e5c7d35292d44a4e18b20100e2f16

    • SHA1

      066fc0528076b761ca904ec532f9c7edfdf173db

    • SHA256

      c0f9d481ea247a35d2328da50cbba1fe1196c6c215beeeab1e1962419d34b5bc

    • SHA512

      db6b64c9e7a0b4333439652fc1a4fadb8ba2b7c745759dd7575f6499d32bbe40d77cbd1cd4ea4a441c88c2c2e2a25291021b138979170704bf2258daa351348a

    • SSDEEP

      384:VF5OC3EPcmZO2Zp+Nye8pqrmub8TyztsDN:VLZEPoKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks