Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

cbb7e6f385...71.exe

windows7-x64

10

cbb7e6f385...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cbb7e6f38596e180c9ff3f38aa28899e713b308b78fa94b5acda1fb2c26ad171

  • Size

    156KB

  • Sample

    221028-w1nfgsaefn

  • MD5

    0abb72e33a0d544e0aefc5d2f1cdb300

  • SHA1

    d31819f36705c11371ba59775ecd7c601940e89c

  • SHA256

    cbb7e6f38596e180c9ff3f38aa28899e713b308b78fa94b5acda1fb2c26ad171

  • SHA512

    db52708606ce8c53d602b673f8111300bb3fd0a6725ae7b13b1425b721673d891833e9c93ae61c9b5f073294de8d69600277bc533df462ef71df68a3952674aa

  • SSDEEP

    3072:DpJyVFgyqTRlU3NhCBvu9pjZEwDxdr8Jr3i5:9JPRl+NhwWrjuwDQdg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cbb7e6f38596e180c9ff3f38aa28899e713b308b78fa94b5acda1fb2c26ad171

    • Size

      156KB

    • MD5

      0abb72e33a0d544e0aefc5d2f1cdb300

    • SHA1

      d31819f36705c11371ba59775ecd7c601940e89c

    • SHA256

      cbb7e6f38596e180c9ff3f38aa28899e713b308b78fa94b5acda1fb2c26ad171

    • SHA512

      db52708606ce8c53d602b673f8111300bb3fd0a6725ae7b13b1425b721673d891833e9c93ae61c9b5f073294de8d69600277bc533df462ef71df68a3952674aa

    • SSDEEP

      3072:DpJyVFgyqTRlU3NhCBvu9pjZEwDxdr8Jr3i5:9JPRl+NhwWrjuwDQdg

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks