Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b9e65dcaae...79.exe

windows7-x64

10

b9e65dcaae...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9e65dcaaebcaaa7393f677997a7aa79

  • Size

    35KB

  • Sample

    240307-2492jshf7s

  • MD5

    b9e65dcaaebcaaa7393f677997a7aa79

  • SHA1

    fee140708be425e5ec3a827ee6083f1ec7072a13

  • SHA256

    798f8698fc6a500b954a0bad01acc25e9120c2ab3e7c74c40e8f9ff936129b28

  • SHA512

    34c4a35efef7c73b2a8198005589822d438f9674934bc0ca355bce9db02652304501abab1195d81baa53b5052be0808848bc0d701d831de7efdcb2f5002bf0ed

  • SSDEEP

    768:WSFD2Dn9m9VTXiOjO4ZcXZbgFqKdbdNhe05WPCc2erQl:WSx2ZmrTXljORXFgFT5Jh5WPCcdEl

Score
10/10
persistence

Malware Config

Targets

    • Target

      b9e65dcaaebcaaa7393f677997a7aa79

    • Size

      35KB

    • MD5

      b9e65dcaaebcaaa7393f677997a7aa79

    • SHA1

      fee140708be425e5ec3a827ee6083f1ec7072a13

    • SHA256

      798f8698fc6a500b954a0bad01acc25e9120c2ab3e7c74c40e8f9ff936129b28

    • SHA512

      34c4a35efef7c73b2a8198005589822d438f9674934bc0ca355bce9db02652304501abab1195d81baa53b5052be0808848bc0d701d831de7efdcb2f5002bf0ed

    • SSDEEP

      768:WSFD2Dn9m9VTXiOjO4ZcXZbgFqKdbdNhe05WPCc2erQl:WSx2ZmrTXljORXFgFT5Jh5WPCcdEl

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks