Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

1

FunshionIn...33.exe

windows7-x64

5

FunshionIn...33.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FunshionInstall_C1_P33.exe

  • Size

    11.5MB

  • Sample

    240723-qpkmkavgka

  • MD5

    cf2ed442dd89d9beeaea95f50f9ab97a

  • SHA1

    912c0c1fd64ccccc552380c63bcbca817720a7ff

  • SHA256

    b27843c513b9af7e52ea7bd8bc0c501749afa1beeaa051e34005c612c9eb55a0

  • SHA512

    e5e582ccc2b1bdf5fb4069ee7c1712e6d455bbd6386f1f46e3c50b171218031226c53351dc44d1c9c37752d75a8e2523eb544e2195705df5344ff0505b03f447

  • SSDEEP

    196608:8SuavcveanSa3P62kfFv4in/98aUD1zA+fiNe2Dd9ofHiaWYsgjW9aka3j:YveaSSP62iFVH82Dd9onsgj/fj

Score
5/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      FunshionInstall_C1_P33.exe

    • Size

      11.5MB

    • MD5

      cf2ed442dd89d9beeaea95f50f9ab97a

    • SHA1

      912c0c1fd64ccccc552380c63bcbca817720a7ff

    • SHA256

      b27843c513b9af7e52ea7bd8bc0c501749afa1beeaa051e34005c612c9eb55a0

    • SHA512

      e5e582ccc2b1bdf5fb4069ee7c1712e6d455bbd6386f1f46e3c50b171218031226c53351dc44d1c9c37752d75a8e2523eb544e2195705df5344ff0505b03f447

    • SSDEEP

      196608:8SuavcveanSa3P62kfFv4in/98aUD1zA+fiNe2Dd9ofHiaWYsgjW9aka3j:YveaSSP62iFVH82Dd9onsgj/fj

    Score
    5/10
    discoverypersistenceprivilege_escalation

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks