Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

Run deskto...e.html

windows10-2004-x64

Resubmissions

17/06/2024, 15:23

240617-ssg2ysvekg 1

14/06/2024, 14:59

240614-scwkeavhlh 1

14/06/2024, 14:57

240614-sbp18svgqf 10

14/06/2024, 14:38

240614-rz3rkaydmj 10

14/06/2024, 14:35

240614-ryblpaycpl 8

14/06/2024, 14:33

240614-rwzkqsyckk 1

12/06/2024, 15:02

240612-sem12stapl 4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Run desktop apps online.html

  • Size

    704KB

  • Sample

    240614-rz3rkaydmj

  • MD5

    635f65de088d30a34365421858161354

  • SHA1

    c974e333c2851cc4e54132f0d5f4b133e1d2f468

  • SHA256

    e04bdafc01429711c069136a2caa54cf8b20d2cee700e576569de57f09a2f3c6

  • SHA512

    1d5dcfe9478960a6ac174c1b9d0c304f4f6dfbb725aaa94e737fc5155db061881c4c887d82cf8c327f32edd53af943b38dcb251e4eaac964b535a338b01656ef

  • SSDEEP

    6144:BwG+iY07vK2VAB671FszYJT1oj8lEKHZ98eROPx0yFTpM3vn0VuFs16DFktUAY5C:BwG+iY0ZR8OyFTIu7oGt

Score
10/10
microsoftdiscoveryevasionpersistencephishing

Malware Config

Targets

    • Target

      Run desktop apps online.html

    • Size

      704KB

    • MD5

      635f65de088d30a34365421858161354

    • SHA1

      c974e333c2851cc4e54132f0d5f4b133e1d2f468

    • SHA256

      e04bdafc01429711c069136a2caa54cf8b20d2cee700e576569de57f09a2f3c6

    • SHA512

      1d5dcfe9478960a6ac174c1b9d0c304f4f6dfbb725aaa94e737fc5155db061881c4c887d82cf8c327f32edd53af943b38dcb251e4eaac964b535a338b01656ef

    • SSDEEP

      6144:BwG+iY07vK2VAB671FszYJT1oj8lEKHZ98eROPx0yFTpM3vn0VuFs16DFktUAY5C:BwG+iY0ZR8OyFTIu7oGt

    Score
    10/10
    microsoftdiscoveryevasionpersistencephishing

    • Modifies security service

      evasion

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks