Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e24966ceb0...75.exe

windows7-x64

10

e24966ceb0...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e24966ceb01b0b84fa06ff1d701c0a633c1a7805d6822ac537aafc7dbe1d7275

  • Size

    224KB

  • Sample

    240422-ety5zafc87

  • MD5

    57e3a3a300f99ad87076de6975a04261

  • SHA1

    f707f6cb91142fc61c729eba75c5902a20b50414

  • SHA256

    e24966ceb01b0b84fa06ff1d701c0a633c1a7805d6822ac537aafc7dbe1d7275

  • SHA512

    92cda2e4d183d11ec2ebdfd07e8cf8dbc94f64dbb88ed27f7f45be494c442c8be0592e53095f63b2f82aaee621b20622288551ec82d59424d033ae1951537c29

  • SSDEEP

    3072:9k6kvZjWnE5b68qaAF/OVLj4UbaxxmLQTi2//9U33T+NVzo:91kBmdaAF4RFSs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e24966ceb01b0b84fa06ff1d701c0a633c1a7805d6822ac537aafc7dbe1d7275

    • Size

      224KB

    • MD5

      57e3a3a300f99ad87076de6975a04261

    • SHA1

      f707f6cb91142fc61c729eba75c5902a20b50414

    • SHA256

      e24966ceb01b0b84fa06ff1d701c0a633c1a7805d6822ac537aafc7dbe1d7275

    • SHA512

      92cda2e4d183d11ec2ebdfd07e8cf8dbc94f64dbb88ed27f7f45be494c442c8be0592e53095f63b2f82aaee621b20622288551ec82d59424d033ae1951537c29

    • SSDEEP

      3072:9k6kvZjWnE5b68qaAF/OVLj4UbaxxmLQTi2//9U33T+NVzo:91kBmdaAF4RFSs

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks