Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

608ef8d255...e5.exe

windows7-x64

10

608ef8d255...e5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    608ef8d2550dbc4090b3ec9855fa918d99ed849b956a9cbefa438370fadc09e5

  • Size

    268KB

  • Sample

    221011-zj17ssdfg4

  • MD5

    79f88998c3c0030605c6ce3f9a586ef3

  • SHA1

    9f9b07bb5332400ed6b548ccdace74f74f874b36

  • SHA256

    608ef8d2550dbc4090b3ec9855fa918d99ed849b956a9cbefa438370fadc09e5

  • SHA512

    9248335f15ff9e0d9a2e55ab99633748e65a69fd237d4a7742bd7f23993c75359e34f9d4f0ab8ae5c2e72384e66f89e658502086358643e383b6979ef10c191c

  • SSDEEP

    6144:7bOJl0UMS422Ous+azXt3D+Qh/pHq8+6IcLaOO3VX6uB/eBcJwRiY70Nf5:U0UMS4hsJzXt3D+Qh3IcqK2d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      608ef8d2550dbc4090b3ec9855fa918d99ed849b956a9cbefa438370fadc09e5

    • Size

      268KB

    • MD5

      79f88998c3c0030605c6ce3f9a586ef3

    • SHA1

      9f9b07bb5332400ed6b548ccdace74f74f874b36

    • SHA256

      608ef8d2550dbc4090b3ec9855fa918d99ed849b956a9cbefa438370fadc09e5

    • SHA512

      9248335f15ff9e0d9a2e55ab99633748e65a69fd237d4a7742bd7f23993c75359e34f9d4f0ab8ae5c2e72384e66f89e658502086358643e383b6979ef10c191c

    • SSDEEP

      6144:7bOJl0UMS422Ous+azXt3D+Qh/pHq8+6IcLaOO3VX6uB/eBcJwRiY70Nf5:U0UMS4hsJzXt3D+Qh3IcqK2d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks