Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

48bc784a13...2d.exe

windows7-x64

10

48bc784a13...2d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48bc784a13d9c6dfd371e9e12e8886126826750185543d94bdb2e585ad92112d

  • Size

    257KB

  • Sample

    240310-zsaffaca9s

  • MD5

    1da3c41b8f0a1a49b39b45b0e4f361cd

  • SHA1

    c89d0f754e7a552f4924e3295e569255a5206db2

  • SHA256

    48bc784a13d9c6dfd371e9e12e8886126826750185543d94bdb2e585ad92112d

  • SHA512

    38a444ccfaf7699a7367571795bf6a0d32a72a0b617751ba6af914e62d9088d766a6a05b6c7fb074d4e31ef354c715779e14cc2584d3b714e01896db6cdb7717

  • SSDEEP

    6144:F0tFwzWQx2+OMcppIRW30d+h8wZ2Uf/T11cradKtvr1K/fObT/bGipKgJJeZ4cAn:4FwtOMcppIRW3M+hwUf/Z1craduvr1Ka

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      48bc784a13d9c6dfd371e9e12e8886126826750185543d94bdb2e585ad92112d

    • Size

      257KB

    • MD5

      1da3c41b8f0a1a49b39b45b0e4f361cd

    • SHA1

      c89d0f754e7a552f4924e3295e569255a5206db2

    • SHA256

      48bc784a13d9c6dfd371e9e12e8886126826750185543d94bdb2e585ad92112d

    • SHA512

      38a444ccfaf7699a7367571795bf6a0d32a72a0b617751ba6af914e62d9088d766a6a05b6c7fb074d4e31ef354c715779e14cc2584d3b714e01896db6cdb7717

    • SSDEEP

      6144:F0tFwzWQx2+OMcppIRW30d+h8wZ2Uf/T11cradKtvr1K/fObT/bGipKgJJeZ4cAn:4FwtOMcppIRW3M+hwUf/Z1craduvr1Ka

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks