Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

KUSXFAC#ZG...XX.zip

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    KUSXFAC#ZGALVTQZFCXX.zip

  • Size

    2.9MB

  • Sample

    240515-rhx5rada3x

  • MD5

    70740b339dfa22035939d6677a3c8ffd

  • SHA1

    6b9fed787dbe0c758e13f84daa99f6ce9f4ed133

  • SHA256

    9d581452ac42021f9d1b82f4a9240c5808bbdc244fdeeb23472165e4742b7372

  • SHA512

    1c7f441340c40329de431fc111ef008654b0459225f3a5e65020714993bec0104bfdbc166bdf0d15c321e96b7a602d04f24ced433cd92cf12e9fef4694930e7b

  • SSDEEP

    49152:LoGPgp/d532qHXmmtdfWk5r8rz4OiJErp/BlG/D6+HIVAuRlEf+c:LoGrq2mKk5r8PdeipWrZoXi+c

Score
7/10
executionpersistence

Malware Config

Targets

    • Target

      KUSXFAC#ZGALVTQZFCXX.zip

    • Size

      2.9MB

    • MD5

      70740b339dfa22035939d6677a3c8ffd

    • SHA1

      6b9fed787dbe0c758e13f84daa99f6ce9f4ed133

    • SHA256

      9d581452ac42021f9d1b82f4a9240c5808bbdc244fdeeb23472165e4742b7372

    • SHA512

      1c7f441340c40329de431fc111ef008654b0459225f3a5e65020714993bec0104bfdbc166bdf0d15c321e96b7a602d04f24ced433cd92cf12e9fef4694930e7b

    • SSDEEP

      49152:LoGPgp/d532qHXmmtdfWk5r8rz4OiJErp/BlG/D6+HIVAuRlEf+c:LoGrq2mKk5r8PdeipWrZoXi+c

    Score
    7/10
    executionpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks