Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

setup.exe

windows10-2004-x64

8

Resubmissions

16/02/2025, 14:17

250216-rlywfszpfv 8

12/06/2024, 18:59

240612-xm35fszdpl 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    4.3MB

  • Sample

    240612-xm35fszdpl

  • MD5

    1b1a928db317af1bed4be0fd0adba475

  • SHA1

    3c27700a34d80bc830ecc65c47b037e7f8c71cfd

  • SHA256

    20805f98dbf288c05821edf3373639b5d51e67a51c683f4f31cce77be3f6c2da

  • SHA512

    4acc1d7b4e8fa93da7bb2b99d7d931e789d316df741c59cd8f55c2b76be44ec2e80a90afcd81c170457fa88bfc877407514c83b84d7aeec5c0468941b7ce428a

  • SSDEEP

    98304:Tf7wCQInrje/CAVMJy1W4DQ2y6FgeIoyN:Tfn6/VSlMNy6Q

Score
8/10
discovery

Malware Config

Targets

    • Target

      setup.exe

    • Size

      4.3MB

    • MD5

      1b1a928db317af1bed4be0fd0adba475

    • SHA1

      3c27700a34d80bc830ecc65c47b037e7f8c71cfd

    • SHA256

      20805f98dbf288c05821edf3373639b5d51e67a51c683f4f31cce77be3f6c2da

    • SHA512

      4acc1d7b4e8fa93da7bb2b99d7d931e789d316df741c59cd8f55c2b76be44ec2e80a90afcd81c170457fa88bfc877407514c83b84d7aeec5c0468941b7ce428a

    • SSDEEP

      98304:Tf7wCQInrje/CAVMJy1W4DQ2y6FgeIoyN:Tfn6/VSlMNy6Q

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks