Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

aef2f7385b...ad.exe

windows7-x64

7

aef2f7385b...ad.exe

windows10-2004-x64

7

$PLUGINSDI...er.exe

windows7-x64

3

$PLUGINSDI...er.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aef2f7385b5f565f24bb55fefe954f3b049c3ddcdbf46b44483c71f2a11959ad

  • Size

    276KB

  • Sample

    241012-b29d5azfjn

  • MD5

    312227127f518d57cf91f76e27718e82

  • SHA1

    d2c7d5ff34502776eea1f9d47a052beb2d3baf83

  • SHA256

    aef2f7385b5f565f24bb55fefe954f3b049c3ddcdbf46b44483c71f2a11959ad

  • SHA512

    4df90b73d925f5e97bc4b958b9f075f487c2b23baefbe68ec6ac7d903e9bde6382fb9d19d08f88af15fb625b81fa9b2bda1b53b6c6218e19ffc10e67ffd80328

  • SSDEEP

    6144:DsaocyLCicZIgFVWheUpDI9gGXMwPdsyF709smxmfRgHtU3bQ/1LODh8:DtobBU7UmfXMsdsyF70H4gH630J6C

Score
7/10
discovery

Malware Config

Targets

    • Target

      aef2f7385b5f565f24bb55fefe954f3b049c3ddcdbf46b44483c71f2a11959ad

    • Size

      276KB

    • MD5

      312227127f518d57cf91f76e27718e82

    • SHA1

      d2c7d5ff34502776eea1f9d47a052beb2d3baf83

    • SHA256

      aef2f7385b5f565f24bb55fefe954f3b049c3ddcdbf46b44483c71f2a11959ad

    • SHA512

      4df90b73d925f5e97bc4b958b9f075f487c2b23baefbe68ec6ac7d903e9bde6382fb9d19d08f88af15fb625b81fa9b2bda1b53b6c6218e19ffc10e67ffd80328

    • SSDEEP

      6144:DsaocyLCicZIgFVWheUpDI9gGXMwPdsyF709smxmfRgHtU3bQ/1LODh8:DtobBU7UmfXMsdsyF70H4gH630J6C

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/installer.exe

    • Size

      214KB

    • MD5

      7cf3bce5ecf2aea97b49e2eba8ca0aba

    • SHA1

      543f5fc23df08f946488d27b2fb16b13b6311d1a

    • SHA256

      7358afae03a24b31c0d82ee4e5fd2f17cafe6c3bdd8e26326aa4118f2169f736

    • SHA512

      5f9184189940af27e25ae2988db8d15923dac81b2410c5fe3287f126fb50df43735fccb4e4d9f376e9f24700604c157aa1828622dab54014d9583a56ab698d8d

    • SSDEEP

      6144:GQyZPNKiygF7R/7qMVtxQEtS6wIZyaNof:GQWPkbGlCEtS6wwFo

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks