Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

66533f3334...c8.exe

windows7-x64

10

66533f3334...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66533f33348fddacce64c01cb02b1b86c41071c2b76fbd37dee82ea1a5f03fc8

  • Size

    60KB

  • Sample

    221030-yjkdlsgbh8

  • MD5

    911f4923d315d8b0770da00dcd0c4a80

  • SHA1

    cc2f023492b30d418ea9de753d4bef23232dca2e

  • SHA256

    66533f33348fddacce64c01cb02b1b86c41071c2b76fbd37dee82ea1a5f03fc8

  • SHA512

    a94e49d0a4361679225949185eb8547fdcdb579b9403fd443b0de2f311f8610325c07dd44c0d98aa9ca12d37415f19b33e05970d85356018772982f691922f49

  • SSDEEP

    768:0C3aY/MexaIPQQU6IUcSUBndFIR0NMRs2H06tF1etbw1o+d8sti:0ChMobuactndFa0NM7TtF1Sw1o+d1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      66533f33348fddacce64c01cb02b1b86c41071c2b76fbd37dee82ea1a5f03fc8

    • Size

      60KB

    • MD5

      911f4923d315d8b0770da00dcd0c4a80

    • SHA1

      cc2f023492b30d418ea9de753d4bef23232dca2e

    • SHA256

      66533f33348fddacce64c01cb02b1b86c41071c2b76fbd37dee82ea1a5f03fc8

    • SHA512

      a94e49d0a4361679225949185eb8547fdcdb579b9403fd443b0de2f311f8610325c07dd44c0d98aa9ca12d37415f19b33e05970d85356018772982f691922f49

    • SSDEEP

      768:0C3aY/MexaIPQQU6IUcSUBndFIR0NMRs2H06tF1etbw1o+d8sti:0ChMobuactndFa0NM7TtF1Sw1o+d1

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks