Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2d5e67a538...0N.exe

windows7-x64

7

2d5e67a538...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d5e67a538870c7a1555c1bbbd1ca000N.exe

  • Size

    1.7MB

  • Sample

    240719-ath2jathnl

  • MD5

    2d5e67a538870c7a1555c1bbbd1ca000

  • SHA1

    4a863c367c0f2babd990423bd99f72be7ca8a6b6

  • SHA256

    2ce263cd843426febc9df739dab122cbda0d0846884d9f68df683524383ebafd

  • SHA512

    6f690a42428644adefe6d919138badd87b5e3e912eb7ec163c310acdb998f5f3644e9bab8d4d919bc1b8ed01fa554e98cba92b54a13b9fab3153a24d50304d99

  • SSDEEP

    24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNJ:mbTChxKCnFnQXBbrtgb/iQvu0UHOK

Score
7/10
persistence

Malware Config

Targets

    • Target

      2d5e67a538870c7a1555c1bbbd1ca000N.exe

    • Size

      1.7MB

    • MD5

      2d5e67a538870c7a1555c1bbbd1ca000

    • SHA1

      4a863c367c0f2babd990423bd99f72be7ca8a6b6

    • SHA256

      2ce263cd843426febc9df739dab122cbda0d0846884d9f68df683524383ebafd

    • SHA512

      6f690a42428644adefe6d919138badd87b5e3e912eb7ec163c310acdb998f5f3644e9bab8d4d919bc1b8ed01fa554e98cba92b54a13b9fab3153a24d50304d99

    • SSDEEP

      24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNJ:mbTChxKCnFnQXBbrtgb/iQvu0UHOK

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks