Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

a2635d65ff...f9.exe

windows7-x64

10

a2635d65ff...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2635d65ff6b35a84a83dde679ec42f9

  • Size

    156KB

  • Sample

    240224-whfb6aah4s

  • MD5

    a2635d65ff6b35a84a83dde679ec42f9

  • SHA1

    de307b17db69f2ebebcfbb09264a4931e76a1931

  • SHA256

    9aee556a3fecab5d59ec947c5292c8ef1657e822c92bfa39f3b200862c2edd86

  • SHA512

    20ac71911650393049ecce03f6168c0236fd20ce8515f184af47139bcb3a7afeb6ca041e52de202c3632dad22d8c83ad251aab72f52d9aa8ad18d96f230fca79

  • SSDEEP

    1536:Q1pMooIDVEBmJoCB/sr9QUpHgsbRBGS1+l5/rlAOXBOhwLAKtoJi+A7UfYoyv8+z:Q7MLucmG4ErOUJgsbT+OukKtdmyv8+PL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a2635d65ff6b35a84a83dde679ec42f9

    • Size

      156KB

    • MD5

      a2635d65ff6b35a84a83dde679ec42f9

    • SHA1

      de307b17db69f2ebebcfbb09264a4931e76a1931

    • SHA256

      9aee556a3fecab5d59ec947c5292c8ef1657e822c92bfa39f3b200862c2edd86

    • SHA512

      20ac71911650393049ecce03f6168c0236fd20ce8515f184af47139bcb3a7afeb6ca041e52de202c3632dad22d8c83ad251aab72f52d9aa8ad18d96f230fca79

    • SSDEEP

      1536:Q1pMooIDVEBmJoCB/sr9QUpHgsbRBGS1+l5/rlAOXBOhwLAKtoJi+A7UfYoyv8+z:Q7MLucmG4ErOUJgsbT+OukKtdmyv8+PL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks