Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8b9774b924...93.exe

windows7-x64

10

8b9774b924...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b9774b9248cb3651596e5888d1e307beeb4e5b6411ab195f56ff60ce8741a93

  • Size

    112KB

  • Sample

    221002-12c4cscfh6

  • MD5

    66e6249e3bef44d8a1fae62a32d644f7

  • SHA1

    1ba9c54e542012680023e0bd5b82d79da823e99a

  • SHA256

    8b9774b9248cb3651596e5888d1e307beeb4e5b6411ab195f56ff60ce8741a93

  • SHA512

    bf1f6fa7a6baf4e0db5860a3315981c1f2a8b20bfcbfc65f64660fbe2f48221902ee4d9863f886850f1f391a2538a253c72082120a7b06b6b6857f84e9ee2949

  • SSDEEP

    1536:affZOdUCJwVuYipwFJ0T72mocTDQtF8Jx0CT67hDmT5OWq:sfMy5FJ0T72mBT+F8x+7hDmT5O/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8b9774b9248cb3651596e5888d1e307beeb4e5b6411ab195f56ff60ce8741a93

    • Size

      112KB

    • MD5

      66e6249e3bef44d8a1fae62a32d644f7

    • SHA1

      1ba9c54e542012680023e0bd5b82d79da823e99a

    • SHA256

      8b9774b9248cb3651596e5888d1e307beeb4e5b6411ab195f56ff60ce8741a93

    • SHA512

      bf1f6fa7a6baf4e0db5860a3315981c1f2a8b20bfcbfc65f64660fbe2f48221902ee4d9863f886850f1f391a2538a253c72082120a7b06b6b6857f84e9ee2949

    • SSDEEP

      1536:affZOdUCJwVuYipwFJ0T72mocTDQtF8Jx0CT67hDmT5OWq:sfMy5FJ0T72mBT+F8x+7hDmT5O/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks