Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6b2d58563e...8c.exe

windows7-x64

10

6b2d58563e...8c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b2d58563e9a4883f39cb956c8da7e49792f95139341670120927e214b30ca8c

  • Size

    228KB

  • Sample

    220919-a77l2sdden

  • MD5

    b0235a2f84837f6ac43b99d2fd6c5aa7

  • SHA1

    74e0921f66295dfaa34e1e1361f016f74f108720

  • SHA256

    6b2d58563e9a4883f39cb956c8da7e49792f95139341670120927e214b30ca8c

  • SHA512

    21ef037163edc64f5ade95e42261351170f229c6a4bc756589d64abd1eb9b6aec52a167884bbca828f10d6a8879b4d6ba08507a2c7a88d6b6ee10000365b986d

  • SSDEEP

    6144:LKcBM3dwqsNy5ibpNjl4EqxF6snji81RUinKIC5j:Gc0dQxlV

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6b2d58563e9a4883f39cb956c8da7e49792f95139341670120927e214b30ca8c

    • Size

      228KB

    • MD5

      b0235a2f84837f6ac43b99d2fd6c5aa7

    • SHA1

      74e0921f66295dfaa34e1e1361f016f74f108720

    • SHA256

      6b2d58563e9a4883f39cb956c8da7e49792f95139341670120927e214b30ca8c

    • SHA512

      21ef037163edc64f5ade95e42261351170f229c6a4bc756589d64abd1eb9b6aec52a167884bbca828f10d6a8879b4d6ba08507a2c7a88d6b6ee10000365b986d

    • SSDEEP

      6144:LKcBM3dwqsNy5ibpNjl4EqxF6snji81RUinKIC5j:Gc0dQxlV

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks