Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

b4cfc91769...9a.exe

windows7-x64

10

b4cfc91769...9a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4cfc917699406360d986d7c44d4f58f08b549528c81add2834f17970ce7e29a

  • Size

    212KB

  • Sample

    221002-a2zz1sfddq

  • MD5

    7267c79c98b4302c237d622cefac81e5

  • SHA1

    76492797a0681bf31a3f421d19c206fd8246e737

  • SHA256

    b4cfc917699406360d986d7c44d4f58f08b549528c81add2834f17970ce7e29a

  • SHA512

    8928bc6b47923672c143bee50fb007b78563bd709e71a7e4071822e9775110d1aff780b42846c4dada63fb3eab488d31e14a1a1fe5426244ec605bccd2f4691c

  • SSDEEP

    3072:AvCh2UjpESxFd3MiaDN/bG0sCOL5pNk+ZxDn/Sg7:oOFd3MiK/SxCOL5pDr

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b4cfc917699406360d986d7c44d4f58f08b549528c81add2834f17970ce7e29a

    • Size

      212KB

    • MD5

      7267c79c98b4302c237d622cefac81e5

    • SHA1

      76492797a0681bf31a3f421d19c206fd8246e737

    • SHA256

      b4cfc917699406360d986d7c44d4f58f08b549528c81add2834f17970ce7e29a

    • SHA512

      8928bc6b47923672c143bee50fb007b78563bd709e71a7e4071822e9775110d1aff780b42846c4dada63fb3eab488d31e14a1a1fe5426244ec605bccd2f4691c

    • SSDEEP

      3072:AvCh2UjpESxFd3MiaDN/bG0sCOL5pNk+ZxDn/Sg7:oOFd3MiK/SxCOL5pDr

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks