Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c763d4e15f...0N.exe

windows7-x64

10

c763d4e15f...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c763d4e15f8c17fef4f48f35d1673a80N.exe

  • Size

    216KB

  • Sample

    240901-r19lhatckq

  • MD5

    c763d4e15f8c17fef4f48f35d1673a80

  • SHA1

    057e91d04050d415295f241bd9e174a3bf637da0

  • SHA256

    ac2ad40f5a678f062a71e22475b34c701489ba86d60f857bc58114fcda3551cb

  • SHA512

    be2227cd793e41928f7d1336eecfcd34ae9bafaa7bc34f831d4aa668393e7ea88c42d16d9962b75bd35ca3a685bf78f0a8fe96aca783b71ed8bd6d9d5dfa9250

  • SSDEEP

    3072:nYjaMKTuxxnM3/7eFE+S2/goM2IFNGzBkl9s7Y:Yn/nM36q+VM2CWs9z

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      c763d4e15f8c17fef4f48f35d1673a80N.exe

    • Size

      216KB

    • MD5

      c763d4e15f8c17fef4f48f35d1673a80

    • SHA1

      057e91d04050d415295f241bd9e174a3bf637da0

    • SHA256

      ac2ad40f5a678f062a71e22475b34c701489ba86d60f857bc58114fcda3551cb

    • SHA512

      be2227cd793e41928f7d1336eecfcd34ae9bafaa7bc34f831d4aa668393e7ea88c42d16d9962b75bd35ca3a685bf78f0a8fe96aca783b71ed8bd6d9d5dfa9250

    • SSDEEP

      3072:nYjaMKTuxxnM3/7eFE+S2/goM2IFNGzBkl9s7Y:Yn/nM36q+VM2CWs9z

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks