Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

ebe4359765...0N.exe

windows7-x64

7

ebe4359765...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebe43597656b129ec30f3b81688d48c0N.exe

  • Size

    208KB

  • Sample

    240715-rlsz7svbrn

  • MD5

    ebe43597656b129ec30f3b81688d48c0

  • SHA1

    697a62161825f9c761621dfa4075372292c0f798

  • SHA256

    268d5097cf3423f5aa8397512c98842af563acc36ad71663a7f1770b5d94c8de

  • SHA512

    60dfc81e8b459d7e842a1503270f13f6833b386aef34b6f8f52b1c30068f2b5f5b45a42a2ca9e2e622701f150460b1eea75aa09ebc7e04b5aab6f88c768cdcf0

  • SSDEEP

    3072:lGPFazIFjShsKSL27AfW+vald9FM1foaskhZcAE5MFxzC/zP4H4fjm5osl/9PYFO:lGtaEJFKSVva9FM1tD5LQEj9

Score
7/10

Malware Config

Targets

    • Target

      ebe43597656b129ec30f3b81688d48c0N.exe

    • Size

      208KB

    • MD5

      ebe43597656b129ec30f3b81688d48c0

    • SHA1

      697a62161825f9c761621dfa4075372292c0f798

    • SHA256

      268d5097cf3423f5aa8397512c98842af563acc36ad71663a7f1770b5d94c8de

    • SHA512

      60dfc81e8b459d7e842a1503270f13f6833b386aef34b6f8f52b1c30068f2b5f5b45a42a2ca9e2e622701f150460b1eea75aa09ebc7e04b5aab6f88c768cdcf0

    • SSDEEP

      3072:lGPFazIFjShsKSL27AfW+vald9FM1foaskhZcAE5MFxzC/zP4H4fjm5osl/9PYFO:lGtaEJFKSVva9FM1tD5LQEj9

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks