Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

55f8b21a13...ec.exe

windows7-x64

10

55f8b21a13...ec.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55f8b21a13e50a50514f3b8964d69a3f425c70eb08b0f347671ab44b847f08ec

  • Size

    100KB

  • Sample

    221019-wbp8saacd2

  • MD5

    126cde9cc95b4ce11e125064c562fef0

  • SHA1

    1dabe988c54920d9395fb60638014f2b48263ab2

  • SHA256

    55f8b21a13e50a50514f3b8964d69a3f425c70eb08b0f347671ab44b847f08ec

  • SHA512

    d1a7a340adcd2d1faab2d076e5671bcd18606fc9f91302f2c4038a8cc61d16bf960da4d7c134d69d7b1c82747613c0a84623ae470769652b90ae89ccda00b945

  • SSDEEP

    1536:5hWcX2203QYxJcIRGWcOWPWvXArnY1ZPBizyes5NIjnZqd:OQ0NJizyeuCn0d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      55f8b21a13e50a50514f3b8964d69a3f425c70eb08b0f347671ab44b847f08ec

    • Size

      100KB

    • MD5

      126cde9cc95b4ce11e125064c562fef0

    • SHA1

      1dabe988c54920d9395fb60638014f2b48263ab2

    • SHA256

      55f8b21a13e50a50514f3b8964d69a3f425c70eb08b0f347671ab44b847f08ec

    • SHA512

      d1a7a340adcd2d1faab2d076e5671bcd18606fc9f91302f2c4038a8cc61d16bf960da4d7c134d69d7b1c82747613c0a84623ae470769652b90ae89ccda00b945

    • SSDEEP

      1536:5hWcX2203QYxJcIRGWcOWPWvXArnY1ZPBizyes5NIjnZqd:OQ0NJizyeuCn0d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks