Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

b9bb580ac8...d2.exe

windows7-x64

10

b9bb580ac8...d2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9bb580ac88d878b2165ae7e3cb560b7dd2471d25a850eea5b1b757c3cb7b2d2

  • Size

    240KB

  • Sample

    221029-tw9rtaehan

  • MD5

    83cf66e02fdb324e7336d3749ea8ef74

  • SHA1

    725cd6e7e7f9815e8ad3668e6fdebf9389e13970

  • SHA256

    b9bb580ac88d878b2165ae7e3cb560b7dd2471d25a850eea5b1b757c3cb7b2d2

  • SHA512

    a28f5ad9e15be5e980c374f7a979b8a68fecba777e5fc12d82182f154eacaee2b1a1ea2ba51f7a64157436de46d125330eb7778f003ae99ddfd96a3cccae09cf

  • SSDEEP

    3072:SkN0T8j6VlpvBd90i/SmWKLi7CjFSivnfu3fbMdozt5czHPS:SL0UGKGkFRKfeoztOu

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b9bb580ac88d878b2165ae7e3cb560b7dd2471d25a850eea5b1b757c3cb7b2d2

    • Size

      240KB

    • MD5

      83cf66e02fdb324e7336d3749ea8ef74

    • SHA1

      725cd6e7e7f9815e8ad3668e6fdebf9389e13970

    • SHA256

      b9bb580ac88d878b2165ae7e3cb560b7dd2471d25a850eea5b1b757c3cb7b2d2

    • SHA512

      a28f5ad9e15be5e980c374f7a979b8a68fecba777e5fc12d82182f154eacaee2b1a1ea2ba51f7a64157436de46d125330eb7778f003ae99ddfd96a3cccae09cf

    • SSDEEP

      3072:SkN0T8j6VlpvBd90i/SmWKLi7CjFSivnfu3fbMdozt5czHPS:SL0UGKGkFRKfeoztOu

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks