Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

42b6212a87...19.exe

windows7-x64

10

42b6212a87...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42b6212a87d94e944b1989854d6a76e150a1526d09b7f1a4077e1abb81830019

  • Size

    116KB

  • Sample

    220919-bbpxssheg7

  • MD5

    bc855de407600be582e63e1340f12786

  • SHA1

    9eed0af59ed5c2e9c84f1b8c05e74a70ead3e1a3

  • SHA256

    42b6212a87d94e944b1989854d6a76e150a1526d09b7f1a4077e1abb81830019

  • SHA512

    7d6048bfee8a28983dd5281a6f4cf44799685867a261beb9b29c6fc0735d40ef1a56c51c2564d39c677a5a500a4da728a7351af46de3c009d75442da5f6fe453

  • SSDEEP

    1536:lZpxoV++We8Kw6KBOIW4Z8HO1Zwt0f4HeDUEdMOPy9sbgN2wo7JaS1:fp7+WefIr1ZNDUEdTwQL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      42b6212a87d94e944b1989854d6a76e150a1526d09b7f1a4077e1abb81830019

    • Size

      116KB

    • MD5

      bc855de407600be582e63e1340f12786

    • SHA1

      9eed0af59ed5c2e9c84f1b8c05e74a70ead3e1a3

    • SHA256

      42b6212a87d94e944b1989854d6a76e150a1526d09b7f1a4077e1abb81830019

    • SHA512

      7d6048bfee8a28983dd5281a6f4cf44799685867a261beb9b29c6fc0735d40ef1a56c51c2564d39c677a5a500a4da728a7351af46de3c009d75442da5f6fe453

    • SSDEEP

      1536:lZpxoV++We8Kw6KBOIW4Z8HO1Zwt0f4HeDUEdMOPy9sbgN2wo7JaS1:fp7+WefIr1ZNDUEdTwQL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks