Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

e1b0e767a2...36.exe

windows7-x64

6

e1b0e767a2...36.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1b0e767a2d5b09c61784d013f09b736

  • Size

    356KB

  • Sample

    240327-pxfsxafd7y

  • MD5

    e1b0e767a2d5b09c61784d013f09b736

  • SHA1

    2677d003a1badf2213d91544c2bb951f37586734

  • SHA256

    57dc9a81f61a1ece6813799edff824bd0a66d03238ec0a4f3284225202221197

  • SHA512

    e7281d37660b4456011ca267d8ffb333604e185c454aaa2db0f75dc105912bed56d832ab42d92487014f45a1be8a86de2fd372f7924360bb2102d92e55045913

  • SSDEEP

    6144:sRpjflWowwLIXQJ3YY9ZX9yWeQ5f3zJ4W1Mkpc31hu3ErKeXJ9ez6vJpHPWI:m9lWowgIgJHl/z91MUc3Due59eyWI

Score
7/10
persistence

Malware Config

Targets

    • Target

      e1b0e767a2d5b09c61784d013f09b736

    • Size

      356KB

    • MD5

      e1b0e767a2d5b09c61784d013f09b736

    • SHA1

      2677d003a1badf2213d91544c2bb951f37586734

    • SHA256

      57dc9a81f61a1ece6813799edff824bd0a66d03238ec0a4f3284225202221197

    • SHA512

      e7281d37660b4456011ca267d8ffb333604e185c454aaa2db0f75dc105912bed56d832ab42d92487014f45a1be8a86de2fd372f7924360bb2102d92e55045913

    • SSDEEP

      6144:sRpjflWowwLIXQJ3YY9ZX9yWeQ5f3zJ4W1Mkpc31hu3ErKeXJ9ez6vJpHPWI:m9lWowgIgJHl/z91MUc3Due59eyWI

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Checks for any installed AV software in registry

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks