Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

35d84579de...ed.exe

windows7-x64

10

35d84579de...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35d84579de71a7dd0de1deef45157fa96d4e9be51702cc78a9f22a355dbf26ed

  • Size

    204KB

  • Sample

    240420-zm9ckshf66

  • MD5

    4c587616b34b14a4f488d4925dc40a83

  • SHA1

    fbea1bde742fbbc11055a5afb963cb4c8d54d327

  • SHA256

    35d84579de71a7dd0de1deef45157fa96d4e9be51702cc78a9f22a355dbf26ed

  • SHA512

    6d278d62dad5ee70f2ed0019703a43aaecf9d762929ce9d3630f940baecbb5a343ceaf53f444eb91af91b0e3d992032d66a8195157e4827179490808d9bc69f8

  • SSDEEP

    3072:kmlW8tB0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWYQ:/0E4QxL7B9W0c1RCzR/fSmlu

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      35d84579de71a7dd0de1deef45157fa96d4e9be51702cc78a9f22a355dbf26ed

    • Size

      204KB

    • MD5

      4c587616b34b14a4f488d4925dc40a83

    • SHA1

      fbea1bde742fbbc11055a5afb963cb4c8d54d327

    • SHA256

      35d84579de71a7dd0de1deef45157fa96d4e9be51702cc78a9f22a355dbf26ed

    • SHA512

      6d278d62dad5ee70f2ed0019703a43aaecf9d762929ce9d3630f940baecbb5a343ceaf53f444eb91af91b0e3d992032d66a8195157e4827179490808d9bc69f8

    • SSDEEP

      3072:kmlW8tB0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWYQ:/0E4QxL7B9W0c1RCzR/fSmlu

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks