Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

cb075d75bc...75.exe

windows7-x64

10

cb075d75bc...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb075d75bc6df350fa99837968b3e02428a019d44b2bb2bfa12b81c99ee58575

  • Size

    132KB

  • Sample

    221030-ypgvnsheep

  • MD5

    92397487cb24bed965a583a92d76b912

  • SHA1

    da80d9f2be8f00ccc07835eb516aff46a9c688b8

  • SHA256

    cb075d75bc6df350fa99837968b3e02428a019d44b2bb2bfa12b81c99ee58575

  • SHA512

    68a43954555ffecbe7c2d564faa5310141a069fe48cc3500539df492a50e21345b1e376f1d7c06eba0216db7f156d3f67f5ae8fb7bae2b1f97388c2f86002176

  • SSDEEP

    3072:VApl++xspX7//GSeIlLXkskMvB00bsMyXeWLku:VApl+I+7//leIBXTkMZ00bsMyXeAk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cb075d75bc6df350fa99837968b3e02428a019d44b2bb2bfa12b81c99ee58575

    • Size

      132KB

    • MD5

      92397487cb24bed965a583a92d76b912

    • SHA1

      da80d9f2be8f00ccc07835eb516aff46a9c688b8

    • SHA256

      cb075d75bc6df350fa99837968b3e02428a019d44b2bb2bfa12b81c99ee58575

    • SHA512

      68a43954555ffecbe7c2d564faa5310141a069fe48cc3500539df492a50e21345b1e376f1d7c06eba0216db7f156d3f67f5ae8fb7bae2b1f97388c2f86002176

    • SSDEEP

      3072:VApl++xspX7//GSeIlLXkskMvB00bsMyXeWLku:VApl+I+7//leIBXTkMZ00bsMyXeAk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks