Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

17b3b3ab6a...43.exe

windows7-x64

10

17b3b3ab6a...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17b3b3ab6abfd697dbef20be374d736a3e5997d606678a91b16b92935a7f3243

  • Size

    208KB

  • Sample

    221011-zhrlzadfb3

  • MD5

    7afa320722d53e647956d52b50e0a7a0

  • SHA1

    dcdfe35bb90ba5b031532c3bd483328027cf21ce

  • SHA256

    17b3b3ab6abfd697dbef20be374d736a3e5997d606678a91b16b92935a7f3243

  • SHA512

    abb5c26a77d42ea20c6ae53ef6c0805cf3fa30845a9dd8b74b3ac919f81d0c7c4a18fc3922ad58c1c685efeae0e8a55f608ca0c90f1297f5eb55962dd167ffab

  • SSDEEP

    6144:UBDrWZrQ+ONFDTIvgte8R2rHFllXgDMWd65QXoHqxVDTG/r1pAa+/mf2X+AxJ9:UBXWZrQ+ONFDTIvgte8R2rHFllXgDMWV

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      17b3b3ab6abfd697dbef20be374d736a3e5997d606678a91b16b92935a7f3243

    • Size

      208KB

    • MD5

      7afa320722d53e647956d52b50e0a7a0

    • SHA1

      dcdfe35bb90ba5b031532c3bd483328027cf21ce

    • SHA256

      17b3b3ab6abfd697dbef20be374d736a3e5997d606678a91b16b92935a7f3243

    • SHA512

      abb5c26a77d42ea20c6ae53ef6c0805cf3fa30845a9dd8b74b3ac919f81d0c7c4a18fc3922ad58c1c685efeae0e8a55f608ca0c90f1297f5eb55962dd167ffab

    • SSDEEP

      6144:UBDrWZrQ+ONFDTIvgte8R2rHFllXgDMWd65QXoHqxVDTG/r1pAa+/mf2X+AxJ9:UBXWZrQ+ONFDTIvgte8R2rHFllXgDMWV

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks