Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2c0cc2b4e28dce99c88d7242f0bf51534187b13eeed3be1b1dbad020699d9625

  • Size

    714KB

  • Sample

    221003-tl5ecaebfn

  • MD5

    41c59cfbda48bcaddaf65dfd27a724eb

  • SHA1

    996304175bf1ddc556544f9e58d4f73e4c24c5fc

  • SHA256

    2c0cc2b4e28dce99c88d7242f0bf51534187b13eeed3be1b1dbad020699d9625

  • SHA512

    d70fe2492023a07f8308787ddb53aedc5ec0a3eb84faf982a136fe08b3b0ce773d52ce8179a6207fbd881d8bbd93280358620af2f41e4d8c8270650b3dc2a8dc

  • SSDEEP

    12288:aaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdu:7AEENIq8XwyVPQclDq/+WnpsSu

Score
10/10

Malware Config

Targets

    • Target

      2c0cc2b4e28dce99c88d7242f0bf51534187b13eeed3be1b1dbad020699d9625

    • Size

      714KB

    • MD5

      41c59cfbda48bcaddaf65dfd27a724eb

    • SHA1

      996304175bf1ddc556544f9e58d4f73e4c24c5fc

    • SHA256

      2c0cc2b4e28dce99c88d7242f0bf51534187b13eeed3be1b1dbad020699d9625

    • SHA512

      d70fe2492023a07f8308787ddb53aedc5ec0a3eb84faf982a136fe08b3b0ce773d52ce8179a6207fbd881d8bbd93280358620af2f41e4d8c8270650b3dc2a8dc

    • SSDEEP

      12288:aaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdu:7AEENIq8XwyVPQclDq/+WnpsSu

    Score
    10/10
    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks