Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

500d37e3f8...05.exe

windows7-x64

7

500d37e3f8...05.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    500d37e3f8195df23609f5f40a7807b685e55a35aefa1a7c72afc2fecf911705

  • Size

    93KB

  • Sample

    240918-1fgjnavcml

  • MD5

    2f4f311e0ed9978d1eeb92f78543067c

  • SHA1

    f10ac269d08a254851cfa751a70031f2cd7b2adf

  • SHA256

    500d37e3f8195df23609f5f40a7807b685e55a35aefa1a7c72afc2fecf911705

  • SHA512

    2a0acd043ee59345523186bd0f5170b645ead44f76d3ba66480ba5326bbbc2be7cead26d963a0dfe1aa372aa1fd3cfda3b677da28a3108fbcfcdefa45a4f3d5a

  • SSDEEP

    1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7I:PfU/WF6QMauSuiWNi9CO+WARJrWNZ6

Score
7/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      500d37e3f8195df23609f5f40a7807b685e55a35aefa1a7c72afc2fecf911705

    • Size

      93KB

    • MD5

      2f4f311e0ed9978d1eeb92f78543067c

    • SHA1

      f10ac269d08a254851cfa751a70031f2cd7b2adf

    • SHA256

      500d37e3f8195df23609f5f40a7807b685e55a35aefa1a7c72afc2fecf911705

    • SHA512

      2a0acd043ee59345523186bd0f5170b645ead44f76d3ba66480ba5326bbbc2be7cead26d963a0dfe1aa372aa1fd3cfda3b677da28a3108fbcfcdefa45a4f3d5a

    • SSDEEP

      1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7I:PfU/WF6QMauSuiWNi9CO+WARJrWNZ6

    Score
    7/10
    defense_evasiondiscoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks