Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

РАСПО...Д.exe

windows7-x64

7

РАСПО...Д.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32df8c49d6f89722c6aca8943883cfff3cdf34074e87ff48f7c96da5d732c02b

  • Size

    1.3MB

  • Sample

    240410-l9pd2afa9v

  • MD5

    5ff286fb753adf61b58b9dadf46b833c

  • SHA1

    d3432e91b046cc73df0b672249182aaf40e78d6c

  • SHA256

    32df8c49d6f89722c6aca8943883cfff3cdf34074e87ff48f7c96da5d732c02b

  • SHA512

    1e7c101fb1cc9e6bd5f753c4d85d033eb1ea1a2c9dc47bb6a8233b1d3ad84ecde1569dac2a58e52c2675db831cae4e730285b1416eebbb89a7800ab6b0109b96

  • SSDEEP

    24576:QgIUq66bU9FujVDgk4VPBiL1EcLILJD6iVqtbBFYBoS3rxGW2Xkdg3l5TW:QDUqFw9FcDH4t0L1EcLSJDBqLFUoS3Ia

Score
7/10

Malware Config

Targets

    • Target

      РАСПОРЯЖЕНИЕ_ГЛАВНОГО_УПРАВЛЕНИЯ-РЖД.exe

    • Size

      1.5MB

    • MD5

      754bfba24b12db4bcbb9c241baaa2557

    • SHA1

      439ccde358d0a93da24cd2049d0a48d760732bca

    • SHA256

      a9799ed289b967be92f920616015e58ae6e27defaa48f377d3cd701d0915fe53

    • SHA512

      b5860b0ff23de57415b6b40d5852ee8f1cbd94cf0e0fcdd774cc9952052e172ccc75768a49ba4d93059e9904a3e5edacdf698036e3b2bb4f5ceb5d1c895455ea

    • SSDEEP

      24576:WKWseKuCdU9rkNPfgkGP5B8ZbiELKLVj6iDyHBzZKpiE3XxoW2X0Fk3l1pm:TFzDW9rIfHGhSZbiELAVjvyxZmiE3Oi5

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks