Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2851717dd520fe59588cdce45661e66cc07120564ef9433c6589bc53f11357c4
-
Size
237KB
-
Sample
240517-ykbg4afh2y
-
MD5
86f350dabaca456322a4cf098469e071
-
SHA1
98a19e7e4f24cc65e3cc13415f076ca3f433b66e
-
SHA256
2851717dd520fe59588cdce45661e66cc07120564ef9433c6589bc53f11357c4
-
SHA512
c9bf139a5478b7b54ce85f676ae9004acce5bdb54da1ac6b21fb16e2e361fedf89639714c291768fbcdea003594912bd7f5e0ee7951e16947863903c7013af44
-
SSDEEP
3072:hsXRmUIMitiMQose27vc+Eld+xZp2vPRL1tT06zJoxAWBcKpSP//dwR1l9B4hTx:GR5IuMQoseGk7RZBGxAycKpSPX2pUb
Static task
static1
Behavioral task
behavioral1
Sample
2851717dd520fe59588cdce45661e66cc07120564ef9433c6589bc53f11357c4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2851717dd520fe59588cdce45661e66cc07120564ef9433c6589bc53f11357c4.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2851717dd520fe59588cdce45661e66cc07120564ef9433c6589bc53f11357c4
-
Size
237KB
-
MD5
86f350dabaca456322a4cf098469e071
-
SHA1
98a19e7e4f24cc65e3cc13415f076ca3f433b66e
-
SHA256
2851717dd520fe59588cdce45661e66cc07120564ef9433c6589bc53f11357c4
-
SHA512
c9bf139a5478b7b54ce85f676ae9004acce5bdb54da1ac6b21fb16e2e361fedf89639714c291768fbcdea003594912bd7f5e0ee7951e16947863903c7013af44
-
SSDEEP
3072:hsXRmUIMitiMQose27vc+Eld+xZp2vPRL1tT06zJoxAWBcKpSP//dwR1l9B4hTx:GR5IuMQoseGk7RZBGxAycKpSPX2pUb
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Scheduled Task/Job
1