Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

d2783d8eb3...9c.exe

windows7-x64

d2783d8eb3...9c.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2783d8eb3a7281096d256f40debe49c

  • Size

    695KB

  • Sample

    240318-d2ntjagb8s

  • MD5

    d2783d8eb3a7281096d256f40debe49c

  • SHA1

    09fc38cb0d02e6468b74fe4b9cd01765d1d89235

  • SHA256

    a2b464f56255bee1d0b7d1ed5b3f3ed713e45ddfce558172b23da82525da7a04

  • SHA512

    5b86df6179d9e37e7733fa1b13771ee11d22c312edb1b9a52544175e469230aaffd333405af7150ed5b6174790a096b8bea492bf96d9fe2b5bf7f77397dd8d16

  • SSDEEP

    12288:xzCXl6eEblXIh6Yo8Gvp9gw5Plsfxin1rliwYZFtpNr6+8Wibs6EmdH/8Z1Z3o4T:o16eEbRIhPC9bux4OdLrBZZXT

Score
10/10
persistenceupx

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

http://lastreporteriche.com/inst.php?id=skytraf01

Targets

    • Target

      d2783d8eb3a7281096d256f40debe49c

    • Size

      695KB

    • MD5

      d2783d8eb3a7281096d256f40debe49c

    • SHA1

      09fc38cb0d02e6468b74fe4b9cd01765d1d89235

    • SHA256

      a2b464f56255bee1d0b7d1ed5b3f3ed713e45ddfce558172b23da82525da7a04

    • SHA512

      5b86df6179d9e37e7733fa1b13771ee11d22c312edb1b9a52544175e469230aaffd333405af7150ed5b6174790a096b8bea492bf96d9fe2b5bf7f77397dd8d16

    • SSDEEP

      12288:xzCXl6eEblXIh6Yo8Gvp9gw5Plsfxin1rliwYZFtpNr6+8Wibs6EmdH/8Z1Z3o4T:o16eEbRIhPC9bux4OdLrBZZXT

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks