Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

e0a6939974...60.exe

windows7-x64

7

e0a6939974...60.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0a69399744fb7037c0ddf8ea1ea8660

  • Size

    18.7MB

  • Sample

    240327-dzfp5sbf48

  • MD5

    e0a69399744fb7037c0ddf8ea1ea8660

  • SHA1

    f258a07441359c5378e7cbc2d7bfb7a3b335d152

  • SHA256

    495b86d8230276a831f2cef115554dc38a27a97813953a385da2ce3979a32dc0

  • SHA512

    ddf7176a9d86b0095e3f4628cb557d8e59bab5d79a57bf9536c589352fcc657add5b0d822e24d31d9b5946541cca3ccf7976b5512facb1e0720b077708ad3cb6

  • SSDEEP

    393216:cf4SpNlrbNFYHcBS3h+N/gc3VWjfny/NjoFbJxpD/Ak2pCcxOz:u4SpNln3YHBx+qfQNjoBpL4FQ

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      e0a69399744fb7037c0ddf8ea1ea8660

    • Size

      18.7MB

    • MD5

      e0a69399744fb7037c0ddf8ea1ea8660

    • SHA1

      f258a07441359c5378e7cbc2d7bfb7a3b335d152

    • SHA256

      495b86d8230276a831f2cef115554dc38a27a97813953a385da2ce3979a32dc0

    • SHA512

      ddf7176a9d86b0095e3f4628cb557d8e59bab5d79a57bf9536c589352fcc657add5b0d822e24d31d9b5946541cca3ccf7976b5512facb1e0720b077708ad3cb6

    • SSDEEP

      393216:cf4SpNlrbNFYHcBS3h+N/gc3VWjfny/NjoFbJxpD/Ak2pCcxOz:u4SpNln3YHBx+qfQNjoBpL4FQ

    Score
    7/10
    pyinstaller

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks