Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c3de679d46...0N.exe

windows7-x64

10

c3de679d46...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3de679d46d7af04fb19fec872658950N.exe

  • Size

    60KB

  • Sample

    240723-q4nmrstamr

  • MD5

    c3de679d46d7af04fb19fec872658950

  • SHA1

    715a2062a806ad6ac2c1bd8915b4175cbd9432b5

  • SHA256

    033a9bdf81cd99f3aac4ccd914b91de59ec3c7ab0aa825511487675f3017816d

  • SHA512

    cae8bdf84fbd586d32c21386e16fa9f6ea459fbbce3f02d32fc6061763ab603307d9184ae2e19f261840a3fa185a358eaee28b77219d25dc8e0aecf5abb7b766

  • SSDEEP

    768:ETgAcnILz6H4PwVjHovQ/o/THkbAqs3OfKDHGlHRJ6Wd:ETCy0CQjH2oQ+RJ6Wd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c3de679d46d7af04fb19fec872658950N.exe

    • Size

      60KB

    • MD5

      c3de679d46d7af04fb19fec872658950

    • SHA1

      715a2062a806ad6ac2c1bd8915b4175cbd9432b5

    • SHA256

      033a9bdf81cd99f3aac4ccd914b91de59ec3c7ab0aa825511487675f3017816d

    • SHA512

      cae8bdf84fbd586d32c21386e16fa9f6ea459fbbce3f02d32fc6061763ab603307d9184ae2e19f261840a3fa185a358eaee28b77219d25dc8e0aecf5abb7b766

    • SSDEEP

      768:ETgAcnILz6H4PwVjHovQ/o/THkbAqs3OfKDHGlHRJ6Wd:ETCy0CQjH2oQ+RJ6Wd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks