Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

c71e4e7e88...da.exe

windows7-x64

8

c71e4e7e88...da.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c71e4e7e88a658c637e6200746dec3da

  • Size

    20KB

  • Sample

    240313-3fzfksef65

  • MD5

    c71e4e7e88a658c637e6200746dec3da

  • SHA1

    086b704065365d7e617ab09d39f72eceae48d02f

  • SHA256

    876ca2d3195a2bec847d41b0033115fbaab8c057d67596897db78eaed1297188

  • SHA512

    f40fa7a999df65760c5e88a585df52413b37e2c85fadc22b71ef7d1905ea7c7964912f93356886ad3b32154e017e8ccc2fcc2c87369bd9b09b1dff46069a39e1

  • SSDEEP

    384:4l8q7E2vDsnwe6qyGPHK7pgymJu7UzFI1PuwNC7GjIP51:4Wq7E2FnqZWgTr+Gw1cD

Score
8/10
persistence

Malware Config

Targets

    • Target

      c71e4e7e88a658c637e6200746dec3da

    • Size

      20KB

    • MD5

      c71e4e7e88a658c637e6200746dec3da

    • SHA1

      086b704065365d7e617ab09d39f72eceae48d02f

    • SHA256

      876ca2d3195a2bec847d41b0033115fbaab8c057d67596897db78eaed1297188

    • SHA512

      f40fa7a999df65760c5e88a585df52413b37e2c85fadc22b71ef7d1905ea7c7964912f93356886ad3b32154e017e8ccc2fcc2c87369bd9b09b1dff46069a39e1

    • SSDEEP

      384:4l8q7E2vDsnwe6qyGPHK7pgymJu7UzFI1PuwNC7GjIP51:4Wq7E2FnqZWgTr+Gw1cD

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks