Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

9f4d7462e5...0N.exe

windows7-x64

10

9f4d7462e5...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f4d7462e5ceb8fbdc6cda2a0cc964c0N.exe

  • Size

    240KB

  • Sample

    240903-grfxqazfqf

  • MD5

    9f4d7462e5ceb8fbdc6cda2a0cc964c0

  • SHA1

    d2edf3de44928332e483c35675b2010ac9ec443b

  • SHA256

    a70e2a1363a33cc4597298a829d4a27370f8ed3b7429c15f9ab0d7de9fedfca6

  • SHA512

    6a92991efff0ff5c42603c9dc536975ee6d1bcbd791793ea84d4fd09562379a4f6ec4b7c2774e68fda6a7c77445012a734ef71039cb257ed25521cb5229e24e2

  • SSDEEP

    3072:vkNpZT8j6VlpvBd90i/SmWKLi7CjFSivnfu3fbMdozt5czHol:vA0UGKGkFRKfeoztOO

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      9f4d7462e5ceb8fbdc6cda2a0cc964c0N.exe

    • Size

      240KB

    • MD5

      9f4d7462e5ceb8fbdc6cda2a0cc964c0

    • SHA1

      d2edf3de44928332e483c35675b2010ac9ec443b

    • SHA256

      a70e2a1363a33cc4597298a829d4a27370f8ed3b7429c15f9ab0d7de9fedfca6

    • SHA512

      6a92991efff0ff5c42603c9dc536975ee6d1bcbd791793ea84d4fd09562379a4f6ec4b7c2774e68fda6a7c77445012a734ef71039cb257ed25521cb5229e24e2

    • SSDEEP

      3072:vkNpZT8j6VlpvBd90i/SmWKLi7CjFSivnfu3fbMdozt5czHol:vA0UGKGkFRKfeoztOO

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks