Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

a23154ec6c...b4.exe

windows7-x64

8

a23154ec6c...b4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a23154ec6c70e15f8352c7b170e3a7b4

  • Size

    18KB

  • Sample

    240224-sx7heaff24

  • MD5

    a23154ec6c70e15f8352c7b170e3a7b4

  • SHA1

    1f270a5b3c689e76aadf912cb8d4122ca7435a1a

  • SHA256

    43fcdb73275eb4922c51f78b6c0a55e36b4e460d0bfcb2a9d83a764d7f526f8c

  • SHA512

    8e61cafef28fcf009c1f0da0d770494929c6d8a8161e02c092f9650a18674a04233a6eecd15b680305105649692749628e679e3f0e9261948dea4a36989c5c5b

  • SSDEEP

    384:k+YUthRZYLbRTr2P0d9UI4FrJCO97GIKp+YeaTvQMJOmkRNw/:YUBS0PUUDFrJCO96IpYegvTt5/

Score
8/10
persistence

Malware Config

Targets

    • Target

      a23154ec6c70e15f8352c7b170e3a7b4

    • Size

      18KB

    • MD5

      a23154ec6c70e15f8352c7b170e3a7b4

    • SHA1

      1f270a5b3c689e76aadf912cb8d4122ca7435a1a

    • SHA256

      43fcdb73275eb4922c51f78b6c0a55e36b4e460d0bfcb2a9d83a764d7f526f8c

    • SHA512

      8e61cafef28fcf009c1f0da0d770494929c6d8a8161e02c092f9650a18674a04233a6eecd15b680305105649692749628e679e3f0e9261948dea4a36989c5c5b

    • SSDEEP

      384:k+YUthRZYLbRTr2P0d9UI4FrJCO97GIKp+YeaTvQMJOmkRNw/:YUBS0PUUDFrJCO96IpYegvTt5/

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks