Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9ff49bde68f72df3a7dc1dbd2b3c4964c558e872a5afa5b651533ba36b1847caN
-
Size
31KB
-
Sample
241004-y2vx3atgmq
-
MD5
d240f415d3bbe45899d944a38634b910
-
SHA1
42c23e760dec3ddf8bcca9988913299ded3d1aa1
-
SHA256
9ff49bde68f72df3a7dc1dbd2b3c4964c558e872a5afa5b651533ba36b1847ca
-
SHA512
19c9ced3376ddb0e9d8121a76fdd94257f67304c8580c11259d2991edb738ad682e473c63e459a41bb50131ee8186393b44b88624fed800fa09f343270336e22
-
SSDEEP
768:3W5KLZ/vbDEj7R/eZ/OnhW6wVmuHXJHdzTC/Wc8HEzHvc:3W5SZbDEj7R2Z/Onc6wVBpGpRTvc
Static task
static1
Behavioral task
behavioral1
Sample
9ff49bde68f72df3a7dc1dbd2b3c4964c558e872a5afa5b651533ba36b1847caN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9ff49bde68f72df3a7dc1dbd2b3c4964c558e872a5afa5b651533ba36b1847caN.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
9ff49bde68f72df3a7dc1dbd2b3c4964c558e872a5afa5b651533ba36b1847caN
-
Size
31KB
-
MD5
d240f415d3bbe45899d944a38634b910
-
SHA1
42c23e760dec3ddf8bcca9988913299ded3d1aa1
-
SHA256
9ff49bde68f72df3a7dc1dbd2b3c4964c558e872a5afa5b651533ba36b1847ca
-
SHA512
19c9ced3376ddb0e9d8121a76fdd94257f67304c8580c11259d2991edb738ad682e473c63e459a41bb50131ee8186393b44b88624fed800fa09f343270336e22
-
SSDEEP
768:3W5KLZ/vbDEj7R/eZ/OnhW6wVmuHXJHdzTC/Wc8HEzHvc:3W5SZbDEj7R2Z/Onc6wVBpGpRTvc
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2