Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

Trojan-Ran...er.exe

windows7-x64

8

Trojan-Ran...er.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan-Ransom.Win32.Blocker.iwbo-d3d1b46c3bcb836f01f3a3d77d23ffa2618cffb64f953978a50f3d281ad5dd66

  • Size

    94KB

  • Sample

    221107-fkmagshdh3

  • MD5

    dc6dc4733186aac2aa3ff6c8a4bbe1f0

  • SHA1

    526e635779c781f02ee80e23b58c517e400cab91

  • SHA256

    d3d1b46c3bcb836f01f3a3d77d23ffa2618cffb64f953978a50f3d281ad5dd66

  • SHA512

    dedb7463d8f44a2429e4be8fff8cb4fbb19bfc1796ed62bb77f8198522f771fb8a500fae50af591736590dec2854f755ef63b25d193387c575317fa8613c298a

  • SSDEEP

    1536:Q54R7NkWER9I6BhCUGBf16nMmisfA9yL95o+Uic3qlEzCOMGsPXIUxA0cK:aIqWJUbsHmimcyrOic3rzCOMGoI4A0D

Score
8/10
persistence

Malware Config

Targets

    • Target

      Trojan-Ransom.Win32.Blocker.iwbo-d3d1b46c3bcb836f01f3a3d77d23ffa2618cffb64f953978a50f3d281ad5dd66

    • Size

      94KB

    • MD5

      dc6dc4733186aac2aa3ff6c8a4bbe1f0

    • SHA1

      526e635779c781f02ee80e23b58c517e400cab91

    • SHA256

      d3d1b46c3bcb836f01f3a3d77d23ffa2618cffb64f953978a50f3d281ad5dd66

    • SHA512

      dedb7463d8f44a2429e4be8fff8cb4fbb19bfc1796ed62bb77f8198522f771fb8a500fae50af591736590dec2854f755ef63b25d193387c575317fa8613c298a

    • SSDEEP

      1536:Q54R7NkWER9I6BhCUGBf16nMmisfA9yL95o+Uic3qlEzCOMGsPXIUxA0cK:aIqWJUbsHmimcyrOic3rzCOMGoI4A0D

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks