Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2efc1cb4d9...11.exe

windows7-x64

10

2efc1cb4d9...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2efc1cb4d9f6f23878737adb5b4cc111

  • Size

    180KB

  • Sample

    240409-1wt5pade44

  • MD5

    2efc1cb4d9f6f23878737adb5b4cc111

  • SHA1

    e6be139cc34c29d5edf1fca3d39c38190d5ca327

  • SHA256

    52f1372117428295edcc4be3d2d86814db0580d3471acac9e0103b19564eab4d

  • SHA512

    4a376d9fdd18c86920306da3a2e04dab28a8cafbd174d20cc95836fdff8646e5c54002aab513f89a63115ffc96c3f8f0e7bc57f999465b0784ee38e6e4707285

  • SSDEEP

    3072:9ZqSC+y50cm1tnRd5GK/fObT/bGinhssp9nPVmvEfL2co3ZwURmkPiR/+5JS3a:jqSC+Lcm1Dd0K/fObT/bGihssp1VmvEs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2efc1cb4d9f6f23878737adb5b4cc111

    • Size

      180KB

    • MD5

      2efc1cb4d9f6f23878737adb5b4cc111

    • SHA1

      e6be139cc34c29d5edf1fca3d39c38190d5ca327

    • SHA256

      52f1372117428295edcc4be3d2d86814db0580d3471acac9e0103b19564eab4d

    • SHA512

      4a376d9fdd18c86920306da3a2e04dab28a8cafbd174d20cc95836fdff8646e5c54002aab513f89a63115ffc96c3f8f0e7bc57f999465b0784ee38e6e4707285

    • SSDEEP

      3072:9ZqSC+y50cm1tnRd5GK/fObT/bGinhssp9nPVmvEfL2co3ZwURmkPiR/+5JS3a:jqSC+Lcm1Dd0K/fObT/bGihssp1VmvEs

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks