Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6e287dca83f3b909f15275b9f5f832fee327f5a9c9a5903450e75abbcb9ef2ad
-
Size
10.4MB
-
Sample
240818-x8ptystdlj
-
MD5
2e784cdab6b1f0e6cc0ef4b620354bfd
-
SHA1
4f1f5f252804720aa2c94682d0af141bc9c8584e
-
SHA256
6e287dca83f3b909f15275b9f5f832fee327f5a9c9a5903450e75abbcb9ef2ad
-
SHA512
2303c0c89824babee763944a74c8f77a94ff6185e00819942fc29fe54658185c5eec8ccbc7bc702406f938a28bbfdc5ee7e3314421e717ca2c27f3c8a8dd7aca
-
SSDEEP
196608:gUZWC2SSJ7PbDdh0HtQba8z1sjzkAilU4I4:gUZB25J7PbDjOQba8psjzyz
Static task
static1
Behavioral task
behavioral1
Sample
6e287dca83f3b909f15275b9f5f832fee327f5a9c9a5903450e75abbcb9ef2ad.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6e287dca83f3b909f15275b9f5f832fee327f5a9c9a5903450e75abbcb9ef2ad.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
6e287dca83f3b909f15275b9f5f832fee327f5a9c9a5903450e75abbcb9ef2ad
-
Size
10.4MB
-
MD5
2e784cdab6b1f0e6cc0ef4b620354bfd
-
SHA1
4f1f5f252804720aa2c94682d0af141bc9c8584e
-
SHA256
6e287dca83f3b909f15275b9f5f832fee327f5a9c9a5903450e75abbcb9ef2ad
-
SHA512
2303c0c89824babee763944a74c8f77a94ff6185e00819942fc29fe54658185c5eec8ccbc7bc702406f938a28bbfdc5ee7e3314421e717ca2c27f3c8a8dd7aca
-
SSDEEP
196608:gUZWC2SSJ7PbDdh0HtQba8z1sjzkAilU4I4:gUZB25J7PbDjOQba8psjzyz
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1