Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

55d71e132f...b6.exe

windows7-x64

10

55d71e132f...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55d71e132fcf369e6195359fbc408913523721328b8b166351a03f3e2aa8f4b6

  • Size

    140KB

  • Sample

    221020-2ssccsaah3

  • MD5

    5896d7a1c209c8ef3ecf50f1c6c4fc30

  • SHA1

    bebccc08def9fe98c5c728ecac3909b340a1177f

  • SHA256

    55d71e132fcf369e6195359fbc408913523721328b8b166351a03f3e2aa8f4b6

  • SHA512

    24e922aa8ea208c080bff35e64f8c2c07404c7edd47d5022c819d0d4d87adc4482eb02c70590b0a7f8d4c2c1e9b644e75a777d8cac6d76f36a303977c039389f

  • SSDEEP

    3072:pbPev7777777777777777jk77777777777777777774npPnYyQ1cM63Om:pOPnYHg33

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      55d71e132fcf369e6195359fbc408913523721328b8b166351a03f3e2aa8f4b6

    • Size

      140KB

    • MD5

      5896d7a1c209c8ef3ecf50f1c6c4fc30

    • SHA1

      bebccc08def9fe98c5c728ecac3909b340a1177f

    • SHA256

      55d71e132fcf369e6195359fbc408913523721328b8b166351a03f3e2aa8f4b6

    • SHA512

      24e922aa8ea208c080bff35e64f8c2c07404c7edd47d5022c819d0d4d87adc4482eb02c70590b0a7f8d4c2c1e9b644e75a777d8cac6d76f36a303977c039389f

    • SSDEEP

      3072:pbPev7777777777777777jk77777777777777777774npPnYyQ1cM63Om:pOPnYHg33

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks