Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5b7b731a85...bd.exe

windows7-x64

10

5b7b731a85...bd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b7b731a85ae507d183b17ccfa85184b82d55a2969e5d4396e70f27ef7d1acbd

  • Size

    60KB

  • Sample

    221004-evg8vabhbm

  • MD5

    200c0d056439f0cf98a16748be1d6dfd

  • SHA1

    5dbf0072776307fb38b6a51feb873d5a667befea

  • SHA256

    5b7b731a85ae507d183b17ccfa85184b82d55a2969e5d4396e70f27ef7d1acbd

  • SHA512

    2eff7a4c5a930f2c363c00e34b1067f509f20e3bd4ac29d603b1cb0b0e9de03f1e84fb97bc9b027b455fa1b48e088b6ca7e9e97d593b1c19669da878a385f85c

  • SSDEEP

    768:mJVALL5xSmPhmUOgUuEMB8SCQu0NMRb9qHeFtFSvoPuQ+Oij7:mYLtQy5euj8SC90NMO2tFSwPuQ+Oy

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5b7b731a85ae507d183b17ccfa85184b82d55a2969e5d4396e70f27ef7d1acbd

    • Size

      60KB

    • MD5

      200c0d056439f0cf98a16748be1d6dfd

    • SHA1

      5dbf0072776307fb38b6a51feb873d5a667befea

    • SHA256

      5b7b731a85ae507d183b17ccfa85184b82d55a2969e5d4396e70f27ef7d1acbd

    • SHA512

      2eff7a4c5a930f2c363c00e34b1067f509f20e3bd4ac29d603b1cb0b0e9de03f1e84fb97bc9b027b455fa1b48e088b6ca7e9e97d593b1c19669da878a385f85c

    • SSDEEP

      768:mJVALL5xSmPhmUOgUuEMB8SCQu0NMRb9qHeFtFSvoPuQ+Oij7:mYLtQy5euj8SC90NMO2tFSwPuQ+Oy

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks