Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

0edcbb300e...e7.exe

windows7-x64

10

0edcbb300e...e7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0edcbb300e24c70e14717d0ea33ea46ed49636b70f9e1dde85bc75b652c683e7

  • Size

    212KB

  • Sample

    221106-smrn7sbaal

  • MD5

    0cdd1e423313376c9bf60e364716bfb0

  • SHA1

    abf926def7f9d2bd6586c42f6110a06410b56dac

  • SHA256

    0edcbb300e24c70e14717d0ea33ea46ed49636b70f9e1dde85bc75b652c683e7

  • SHA512

    8575ab627212634f017ac6508f38e24a3ba8079e97c0f76e0b5675eba9c6947f2828228d26f5a9214be4e92be9ed2dadb9ecb51704b4827f14c9b3469bc7ffdf

  • SSDEEP

    6144:dO2OG4GkabKnvmb7/D26s7olvW47imsG7CgHE9roWkw8e5SG:dOvP5abKnvmb7/D26l7jsGegHECRPG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0edcbb300e24c70e14717d0ea33ea46ed49636b70f9e1dde85bc75b652c683e7

    • Size

      212KB

    • MD5

      0cdd1e423313376c9bf60e364716bfb0

    • SHA1

      abf926def7f9d2bd6586c42f6110a06410b56dac

    • SHA256

      0edcbb300e24c70e14717d0ea33ea46ed49636b70f9e1dde85bc75b652c683e7

    • SHA512

      8575ab627212634f017ac6508f38e24a3ba8079e97c0f76e0b5675eba9c6947f2828228d26f5a9214be4e92be9ed2dadb9ecb51704b4827f14c9b3469bc7ffdf

    • SSDEEP

      6144:dO2OG4GkabKnvmb7/D26s7olvW47imsG7CgHE9roWkw8e5SG:dOvP5abKnvmb7/D26l7jsGegHECRPG

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks