Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

a5dfbb7f18...86.exe

windows7-x64

7

a5dfbb7f18...86.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5dfbb7f1866d2b15adee689cc4bdfcaccdb5f71611903cbf9936a969a528a86

  • Size

    933KB

  • Sample

    240228-zp39cadg43

  • MD5

    b8f29f83d698c7c053f61e25ead1ce8d

  • SHA1

    7b27c1132ecb426d42058e7e41e6d336c994c2ff

  • SHA256

    a5dfbb7f1866d2b15adee689cc4bdfcaccdb5f71611903cbf9936a969a528a86

  • SHA512

    f49150e31ed34f4d1322bd8676574538ec9292b9e2b75484119bf723a73968410e9cc8fea2f92d9ffffef088997bb519c2cfc070145b7168c60a2e86094b77fa

  • SSDEEP

    24576:2JN9GENWyYHf2T9TWZxyy2bzuRlqxWYdMD:2X9ZWyEIJWmy2vuRlCeD

Score
7/10
evasiontrojan

Malware Config

Targets

    • Target

      a5dfbb7f1866d2b15adee689cc4bdfcaccdb5f71611903cbf9936a969a528a86

    • Size

      933KB

    • MD5

      b8f29f83d698c7c053f61e25ead1ce8d

    • SHA1

      7b27c1132ecb426d42058e7e41e6d336c994c2ff

    • SHA256

      a5dfbb7f1866d2b15adee689cc4bdfcaccdb5f71611903cbf9936a969a528a86

    • SHA512

      f49150e31ed34f4d1322bd8676574538ec9292b9e2b75484119bf723a73968410e9cc8fea2f92d9ffffef088997bb519c2cfc070145b7168c60a2e86094b77fa

    • SSDEEP

      24576:2JN9GENWyYHf2T9TWZxyy2bzuRlqxWYdMD:2X9ZWyEIJWmy2vuRlCeD

    Score
    7/10
    evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks