Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

863620b853...93.exe

windows7-x64

8

863620b853...93.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    863620b853965c943aefbc327c33f6d3f0e86f9991468b7786317f8fc8df7093

  • Size

    20KB

  • Sample

    221107-cpdmcscfg7

  • MD5

    2cf43ad8c96711f7f08cf3e9db900840

  • SHA1

    03c4692a882a7aa6ff3b36f8f79fdec5fb642f68

  • SHA256

    863620b853965c943aefbc327c33f6d3f0e86f9991468b7786317f8fc8df7093

  • SHA512

    6d80b66babe83a649a6ca313e92e4d89dceec2fd88b77dc57b38b370a8f99a9813a308caacce46c79b116c9566a1eef48f61e434ff332644727a253f87df2923

  • SSDEEP

    192:1l5E3krTuntKy0peHDfCpHfBv+I4QwXt9V+jqu0G5KDJBl:1M3PnQoHDCpHf4I4Qwdc0G5KDJH

Score
8/10

Malware Config

Targets

    • Target

      863620b853965c943aefbc327c33f6d3f0e86f9991468b7786317f8fc8df7093

    • Size

      20KB

    • MD5

      2cf43ad8c96711f7f08cf3e9db900840

    • SHA1

      03c4692a882a7aa6ff3b36f8f79fdec5fb642f68

    • SHA256

      863620b853965c943aefbc327c33f6d3f0e86f9991468b7786317f8fc8df7093

    • SHA512

      6d80b66babe83a649a6ca313e92e4d89dceec2fd88b77dc57b38b370a8f99a9813a308caacce46c79b116c9566a1eef48f61e434ff332644727a253f87df2923

    • SSDEEP

      192:1l5E3krTuntKy0peHDfCpHfBv+I4QwXt9V+jqu0G5KDJBl:1M3PnQoHDCpHf4I4Qwdc0G5KDJH

    Score
    8/10

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks