Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

13c0690f85...23.exe

windows7-x64

8

13c0690f85...23.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13c0690f8502a4498119d42429573339394fc95b6751d5747565735657691b23

  • Size

    168KB

  • Sample

    221011-cr862saga8

  • MD5

    6e9e80d1fb531f6dc3fed7bb456f5ff0

  • SHA1

    3af891b7f088113133cdc403f406e98555ccf69f

  • SHA256

    13c0690f8502a4498119d42429573339394fc95b6751d5747565735657691b23

  • SHA512

    faad7eab0b14d6b846ba96aba2b453094ab1bd68d2114deaa94292e3279f0e4f810735989dec1d16ad0bd3d78e6936ce902b394fc9e51758262b701246b17b0c

  • SSDEEP

    3072:rBAp5XhKpN4eOyVTGfhEClj8jTk+0hKWuOVEXIC1YDuKPeTx:WbXE9OiTGfhEClq9IuOVEXIgY5GTx

Score
8/10
discovery

Malware Config

Targets

    • Target

      13c0690f8502a4498119d42429573339394fc95b6751d5747565735657691b23

    • Size

      168KB

    • MD5

      6e9e80d1fb531f6dc3fed7bb456f5ff0

    • SHA1

      3af891b7f088113133cdc403f406e98555ccf69f

    • SHA256

      13c0690f8502a4498119d42429573339394fc95b6751d5747565735657691b23

    • SHA512

      faad7eab0b14d6b846ba96aba2b453094ab1bd68d2114deaa94292e3279f0e4f810735989dec1d16ad0bd3d78e6936ce902b394fc9e51758262b701246b17b0c

    • SSDEEP

      3072:rBAp5XhKpN4eOyVTGfhEClj8jTk+0hKWuOVEXIC1YDuKPeTx:WbXE9OiTGfhEClq9IuOVEXIgY5GTx

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks