Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d7b6ebd55e...43.exe

windows7-x64

10

d7b6ebd55e...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7b6ebd55e2cff569dd8cda9c4da9a4f8a4b8e61fc771b93467900ce58284c43

  • Size

    220KB

  • Sample

    221002-a44e8aeca8

  • MD5

    572934bbe281f291a473824c691546db

  • SHA1

    17c21ce323d0e5531629e6f9df0ef308b48d5a61

  • SHA256

    d7b6ebd55e2cff569dd8cda9c4da9a4f8a4b8e61fc771b93467900ce58284c43

  • SHA512

    833840cca27c906483fa58b7b9d26f05a20ead960e626e0af5fd38d4902069b55855eca42031ae3ff4737be9f0ab3e35e2538a33a9432267126289dbe9ac25a0

  • SSDEEP

    3072:SqOufkr8YUL4qx9RIHgil3UuhSa3U3dD8d6Oy+MIrnj3J+NBy:jOOko15x9SHVeOj0k

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d7b6ebd55e2cff569dd8cda9c4da9a4f8a4b8e61fc771b93467900ce58284c43

    • Size

      220KB

    • MD5

      572934bbe281f291a473824c691546db

    • SHA1

      17c21ce323d0e5531629e6f9df0ef308b48d5a61

    • SHA256

      d7b6ebd55e2cff569dd8cda9c4da9a4f8a4b8e61fc771b93467900ce58284c43

    • SHA512

      833840cca27c906483fa58b7b9d26f05a20ead960e626e0af5fd38d4902069b55855eca42031ae3ff4737be9f0ab3e35e2538a33a9432267126289dbe9ac25a0

    • SSDEEP

      3072:SqOufkr8YUL4qx9RIHgil3UuhSa3U3dD8d6Oy+MIrnj3J+NBy:jOOko15x9SHVeOj0k

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks