Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2c0cc2b4e2...25.exe

windows7-x64

10

2c0cc2b4e2...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c0cc2b4e28dce99c88d7242f0bf51534187b13eeed3be1b1dbad020699d9625

  • Size

    714KB

  • Sample

    221003-tl5ecaebfn

  • MD5

    41c59cfbda48bcaddaf65dfd27a724eb

  • SHA1

    996304175bf1ddc556544f9e58d4f73e4c24c5fc

  • SHA256

    2c0cc2b4e28dce99c88d7242f0bf51534187b13eeed3be1b1dbad020699d9625

  • SHA512

    d70fe2492023a07f8308787ddb53aedc5ec0a3eb84faf982a136fe08b3b0ce773d52ce8179a6207fbd881d8bbd93280358620af2f41e4d8c8270650b3dc2a8dc

  • SSDEEP

    12288:aaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdu:7AEENIq8XwyVPQclDq/+WnpsSu

Score
10/10
darkcometpersistence

Malware Config

Targets

    • Target

      2c0cc2b4e28dce99c88d7242f0bf51534187b13eeed3be1b1dbad020699d9625

    • Size

      714KB

    • MD5

      41c59cfbda48bcaddaf65dfd27a724eb

    • SHA1

      996304175bf1ddc556544f9e58d4f73e4c24c5fc

    • SHA256

      2c0cc2b4e28dce99c88d7242f0bf51534187b13eeed3be1b1dbad020699d9625

    • SHA512

      d70fe2492023a07f8308787ddb53aedc5ec0a3eb84faf982a136fe08b3b0ce773d52ce8179a6207fbd881d8bbd93280358620af2f41e4d8c8270650b3dc2a8dc

    • SSDEEP

      12288:aaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdu:7AEENIq8XwyVPQclDq/+WnpsSu

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks