Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9e655cc6421bb0ea398418966eba1dbc26f8f6082ee4053d266bcf58d5e5c47b
-
Size
10.5MB
-
Sample
240826-dedeaa1cjd
-
MD5
744a51f2f990a59716d4f51c472563ce
-
SHA1
5baec99bc9b298004d21e09a7b2eba8597d491d8
-
SHA256
9e655cc6421bb0ea398418966eba1dbc26f8f6082ee4053d266bcf58d5e5c47b
-
SHA512
0775fed227a83853e3f53411a20667d62d43b1f0cca3174b96c72b7f31ff2439a86c601333881c0f6a5ae5d40b4b1d492e846355dd667f68194f2ea49c2a8790
-
SSDEEP
196608:WrxHqiSSJ7PbDdh0HtQba8z1sjzkAilU4I4:WrxX5J7PbDjOQba8psjzyz
Static task
static1
Behavioral task
behavioral1
Sample
9e655cc6421bb0ea398418966eba1dbc26f8f6082ee4053d266bcf58d5e5c47b.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
9e655cc6421bb0ea398418966eba1dbc26f8f6082ee4053d266bcf58d5e5c47b
-
Size
10.5MB
-
MD5
744a51f2f990a59716d4f51c472563ce
-
SHA1
5baec99bc9b298004d21e09a7b2eba8597d491d8
-
SHA256
9e655cc6421bb0ea398418966eba1dbc26f8f6082ee4053d266bcf58d5e5c47b
-
SHA512
0775fed227a83853e3f53411a20667d62d43b1f0cca3174b96c72b7f31ff2439a86c601333881c0f6a5ae5d40b4b1d492e846355dd667f68194f2ea49c2a8790
-
SSDEEP
196608:WrxHqiSSJ7PbDdh0HtQba8z1sjzkAilU4I4:WrxX5J7PbDjOQba8psjzyz
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1