Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

27c3da81b8...78.exe

windows7-x64

10

27c3da81b8...78.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27c3da81b80c10c5041f1083d568b778

  • Size

    48KB

  • Sample

    240409-x1ec9aaf5z

  • MD5

    27c3da81b80c10c5041f1083d568b778

  • SHA1

    c2332153a421351275f6ba9cd3476d40d38f81b2

  • SHA256

    d28e6dec073a1f9a47a3700225008096f8185095f94be2e1cd3a6b14615d590f

  • SHA512

    eccc70dba76834b608b76898622fd8c9b42f2990b53d109f12987170c9ab6af79716d7798099ea196a10132cd8ecfa5d087b84928b514192e74f4c32baf2f2d5

  • SSDEEP

    768:QbuipFA13weNFSmOEgYJ0+wIs+cN+Tnc/9/8IZnS0R0TYWfHenHLqHCTHgpQO0M:ctA1geNFSvEA+wMcN+Tnsx5S0REQO0M

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      27c3da81b80c10c5041f1083d568b778

    • Size

      48KB

    • MD5

      27c3da81b80c10c5041f1083d568b778

    • SHA1

      c2332153a421351275f6ba9cd3476d40d38f81b2

    • SHA256

      d28e6dec073a1f9a47a3700225008096f8185095f94be2e1cd3a6b14615d590f

    • SHA512

      eccc70dba76834b608b76898622fd8c9b42f2990b53d109f12987170c9ab6af79716d7798099ea196a10132cd8ecfa5d087b84928b514192e74f4c32baf2f2d5

    • SSDEEP

      768:QbuipFA13weNFSmOEgYJ0+wIs+cN+Tnc/9/8IZnS0R0TYWfHenHLqHCTHgpQO0M:ctA1geNFSvEA+wMcN+Tnsx5S0REQO0M

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks