Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

9830f63eba...07.exe

windows7-x64

8

9830f63eba...07.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9830f63ebad1f1317456e9eaa7df86bf4da592da962c9e20d27968b6cfd85607

  • Size

    336KB

  • Sample

    221003-rbnbzaaccp

  • MD5

    628ec815037575517717a42056b30790

  • SHA1

    cd2c8eb44deda4088d0c377dc8bbce5d2940db6c

  • SHA256

    9830f63ebad1f1317456e9eaa7df86bf4da592da962c9e20d27968b6cfd85607

  • SHA512

    3f0c5c1345ac63d1bca30dbe34629bddc617f59234190da9208e88f745bdceb11b4ac1113ac063adfe7624d7a52d4735a0f2e3ed25a06429d75a22459da11f95

  • SSDEEP

    1536:ja2UssW/RGl5657uYQRedx+g/8+LNKI4pTk8JnWwTYR2Y+ycQTc4KZ06tPgK/sa5:j+lW+GOskh+lIL35FgVrhi9mOr

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      9830f63ebad1f1317456e9eaa7df86bf4da592da962c9e20d27968b6cfd85607

    • Size

      336KB

    • MD5

      628ec815037575517717a42056b30790

    • SHA1

      cd2c8eb44deda4088d0c377dc8bbce5d2940db6c

    • SHA256

      9830f63ebad1f1317456e9eaa7df86bf4da592da962c9e20d27968b6cfd85607

    • SHA512

      3f0c5c1345ac63d1bca30dbe34629bddc617f59234190da9208e88f745bdceb11b4ac1113ac063adfe7624d7a52d4735a0f2e3ed25a06429d75a22459da11f95

    • SSDEEP

      1536:ja2UssW/RGl5657uYQRedx+g/8+LNKI4pTk8JnWwTYR2Y+ycQTc4KZ06tPgK/sa5:j+lW+GOskh+lIL35FgVrhi9mOr

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks