Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

23ec8112b2...25.exe

windows7-x64

10

23ec8112b2...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23ec8112b29b7f315091d3c2d26d83be760f4b1b7037b87317539bf8ee48e025

  • Size

    172KB

  • Sample

    221011-lpgtfsgef2

  • MD5

    22bd21a160c11d4385077bf59558fb00

  • SHA1

    877622fca55c2a5c383b78bb4fa7aa2b8028f6a7

  • SHA256

    23ec8112b29b7f315091d3c2d26d83be760f4b1b7037b87317539bf8ee48e025

  • SHA512

    b75864746ae865daa6b24b2642b6cdccf2c39681d406e536a282e907d05aa3a36bb5541bb38ea8a0c4d4d8bec883d8ae6f36ed1076c6b5ed32f980d137800383

  • SSDEEP

    3072:VojQXp5YHeNh1nm9JuKnvmb7/D26tvJc56bzfCKpbVuugHvmDQiBuAZdv:2jQ7LNh1wMKnvmb7/D26tBc5KDCKpBuA

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      23ec8112b29b7f315091d3c2d26d83be760f4b1b7037b87317539bf8ee48e025

    • Size

      172KB

    • MD5

      22bd21a160c11d4385077bf59558fb00

    • SHA1

      877622fca55c2a5c383b78bb4fa7aa2b8028f6a7

    • SHA256

      23ec8112b29b7f315091d3c2d26d83be760f4b1b7037b87317539bf8ee48e025

    • SHA512

      b75864746ae865daa6b24b2642b6cdccf2c39681d406e536a282e907d05aa3a36bb5541bb38ea8a0c4d4d8bec883d8ae6f36ed1076c6b5ed32f980d137800383

    • SSDEEP

      3072:VojQXp5YHeNh1nm9JuKnvmb7/D26tvJc56bzfCKpbVuugHvmDQiBuAZdv:2jQ7LNh1wMKnvmb7/D26tBc5KDCKpBuA

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks