Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

b0076c1349...c9.exe

windows7-x64

8

b0076c1349...c9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0076c13492984647498cf5ac8558ab834a8c63c87d237e1f6211f591de2a9c9

  • Size

    600KB

  • Sample

    221002-zp22aaach4

  • MD5

    797871aad1cf127495c446876025ad28

  • SHA1

    801f1c3000f8369cc2dad59c85c579ebfabbda04

  • SHA256

    b0076c13492984647498cf5ac8558ab834a8c63c87d237e1f6211f591de2a9c9

  • SHA512

    d1cea280434c2c64eb229a986a66e7e8deb2d6bf1df06d72d89a3467c9bedbbd8aed9c261e8cc35b8ad64697323ac21a17edab20cc03e71f5d37ee0c60ffba63

  • SSDEEP

    12288:i78ByWqjMd2TgDc66CVE8rObc/2izosb5u6uWeZUdE+pznUaH:EsyWqjxgDc6YoObcdoWE/jUdE+pDUaH

Score
8/10

Malware Config

Targets

    • Target

      b0076c13492984647498cf5ac8558ab834a8c63c87d237e1f6211f591de2a9c9

    • Size

      600KB

    • MD5

      797871aad1cf127495c446876025ad28

    • SHA1

      801f1c3000f8369cc2dad59c85c579ebfabbda04

    • SHA256

      b0076c13492984647498cf5ac8558ab834a8c63c87d237e1f6211f591de2a9c9

    • SHA512

      d1cea280434c2c64eb229a986a66e7e8deb2d6bf1df06d72d89a3467c9bedbbd8aed9c261e8cc35b8ad64697323ac21a17edab20cc03e71f5d37ee0c60ffba63

    • SSDEEP

      12288:i78ByWqjMd2TgDc66CVE8rObc/2izosb5u6uWeZUdE+pznUaH:EsyWqjxgDc6YoObcdoWE/jUdE+pDUaH

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks