Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

abaf5a5aee...cb.exe

windows7-x64

9

abaf5a5aee...cb.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abaf5a5aeeb8c794c824c52fbb9044c1a778e5026ddb043193f8263030ae05cb

  • Size

    565KB

  • Sample

    221107-h9xtmaeab8

  • MD5

    48c49e01b72fd3fe2c33008b4dd5e629

  • SHA1

    2c26ee4dd7a5f28923d363dcba7e73c033220389

  • SHA256

    abaf5a5aeeb8c794c824c52fbb9044c1a778e5026ddb043193f8263030ae05cb

  • SHA512

    156aaa7a599c8c6e1e305c2bf814836954712cff899097db2c149501a202ec6576435c291e1918eba984c67f54ce8343d24a50d9d16b5f249f548ccbf8ac12ba

  • SSDEEP

    12288:iRefc/d1X0TM60o+F91uGcsdM4AbKG7ec/Hdch+2OsRc:iRefe0Td0Z/PDCKaeCIxi

Score
9/10
evasion

Malware Config

Targets

    • Target

      abaf5a5aeeb8c794c824c52fbb9044c1a778e5026ddb043193f8263030ae05cb

    • Size

      565KB

    • MD5

      48c49e01b72fd3fe2c33008b4dd5e629

    • SHA1

      2c26ee4dd7a5f28923d363dcba7e73c033220389

    • SHA256

      abaf5a5aeeb8c794c824c52fbb9044c1a778e5026ddb043193f8263030ae05cb

    • SHA512

      156aaa7a599c8c6e1e305c2bf814836954712cff899097db2c149501a202ec6576435c291e1918eba984c67f54ce8343d24a50d9d16b5f249f548ccbf8ac12ba

    • SSDEEP

      12288:iRefc/d1X0TM60o+F91uGcsdM4AbKG7ec/Hdch+2OsRc:iRefe0Td0Z/PDCKaeCIxi

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks