Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8c1b4fc32e...52.exe

windows7-x64

10

8c1b4fc32e...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c1b4fc32e9961c801ec5fc82aca7d062b2558b1dcb95de6df449b47b5cd1a52

  • Size

    228KB

  • Sample

    221004-erskeabgg4

  • MD5

    563e5001ae9d9ddae5e829cba5509630

  • SHA1

    4752c3c1616c1fb6999b5d29119f8a26b8db220a

  • SHA256

    8c1b4fc32e9961c801ec5fc82aca7d062b2558b1dcb95de6df449b47b5cd1a52

  • SHA512

    4fe802c0a9618ea54daa7e93c13be85b7dbb2f0cb45347aa6bc2bad597a04058314b34cfbe5405b34eae840e346f345cdd8d925a681259166e79e52eeee417e8

  • SSDEEP

    3072:oItJVmBl7lZKXxdyMDb7eOTcRLLQ9rkJCXTC+KltZHP:dS9TKBAMypLYqP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8c1b4fc32e9961c801ec5fc82aca7d062b2558b1dcb95de6df449b47b5cd1a52

    • Size

      228KB

    • MD5

      563e5001ae9d9ddae5e829cba5509630

    • SHA1

      4752c3c1616c1fb6999b5d29119f8a26b8db220a

    • SHA256

      8c1b4fc32e9961c801ec5fc82aca7d062b2558b1dcb95de6df449b47b5cd1a52

    • SHA512

      4fe802c0a9618ea54daa7e93c13be85b7dbb2f0cb45347aa6bc2bad597a04058314b34cfbe5405b34eae840e346f345cdd8d925a681259166e79e52eeee417e8

    • SSDEEP

      3072:oItJVmBl7lZKXxdyMDb7eOTcRLLQ9rkJCXTC+KltZHP:dS9TKBAMypLYqP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks