Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

0298089a6b...7e.exe

windows7-x64

9

0298089a6b...7e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0298089a6b591e59fe446c6968985c82574f0d185e3a3112ab40f9c9b377ff7e

  • Size

    524KB

  • Sample

    240309-wess3see6z

  • MD5

    5d53f473ea40efbdd4150bef42377db6

  • SHA1

    a2031320726b27b61b42c302fb7147c4563c0939

  • SHA256

    0298089a6b591e59fe446c6968985c82574f0d185e3a3112ab40f9c9b377ff7e

  • SHA512

    07dc015bfc17dc94244731282ccdb7322bdb8a4e9352e2ace91b264d41837792f5d83c8f0247058b4378b6fdd429c27f989338837b24f255bda83196b82db9a8

  • SSDEEP

    12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

Score
9/10
evasion

Malware Config

Targets

    • Target

      0298089a6b591e59fe446c6968985c82574f0d185e3a3112ab40f9c9b377ff7e

    • Size

      524KB

    • MD5

      5d53f473ea40efbdd4150bef42377db6

    • SHA1

      a2031320726b27b61b42c302fb7147c4563c0939

    • SHA256

      0298089a6b591e59fe446c6968985c82574f0d185e3a3112ab40f9c9b377ff7e

    • SHA512

      07dc015bfc17dc94244731282ccdb7322bdb8a4e9352e2ace91b264d41837792f5d83c8f0247058b4378b6fdd429c27f989338837b24f255bda83196b82db9a8

    • SSDEEP

      12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks