Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

0a564855ac...e1.exe

windows7-x64

8

0a564855ac...e1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a564855ac1df4ff74645e4a266a963a41868d7c49ca644753bf4a1855e7abe1

  • Size

    239KB

  • Sample

    221011-kb2q2aeccq

  • MD5

    4bc2867068deecc96f2ee482073b5650

  • SHA1

    5741c51ba51354c91234e953f47d7bb67727c9c5

  • SHA256

    0a564855ac1df4ff74645e4a266a963a41868d7c49ca644753bf4a1855e7abe1

  • SHA512

    cb081c7ce4cc5804c0fc7614d1c61d9dd1ca521b3611cc4bcec1554f41662953e42061a55cc8b3cbffe30c3dc49e55c76621183a4d86a12ef7c75446117a2fc4

  • SSDEEP

    3072:Ybziv5Eh+IHv4TeQjhndqMiGHIy/tcZlfPxSYDv567vo:82vihx5QjJwMTHHlUnFd6T

Score
8/10

Malware Config

Targets

    • Target

      0a564855ac1df4ff74645e4a266a963a41868d7c49ca644753bf4a1855e7abe1

    • Size

      239KB

    • MD5

      4bc2867068deecc96f2ee482073b5650

    • SHA1

      5741c51ba51354c91234e953f47d7bb67727c9c5

    • SHA256

      0a564855ac1df4ff74645e4a266a963a41868d7c49ca644753bf4a1855e7abe1

    • SHA512

      cb081c7ce4cc5804c0fc7614d1c61d9dd1ca521b3611cc4bcec1554f41662953e42061a55cc8b3cbffe30c3dc49e55c76621183a4d86a12ef7c75446117a2fc4

    • SSDEEP

      3072:Ybziv5Eh+IHv4TeQjhndqMiGHIy/tcZlfPxSYDv567vo:82vihx5QjJwMTHHlUnFd6T

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks