Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

76b7f8f5c4...bf.exe

windows7-x64

10

76b7f8f5c4...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76b7f8f5c4e92c938d4a2ff504a52eb2ed5ee07c6879a4d80cf91f2c631a2bbf

  • Size

    320KB

  • Sample

    221123-wsm5rafg5w

  • MD5

    5965790c4d4f6f570563d9f658225450

  • SHA1

    f9893bbe4d7337239481a250d41b68133b4892e9

  • SHA256

    76b7f8f5c4e92c938d4a2ff504a52eb2ed5ee07c6879a4d80cf91f2c631a2bbf

  • SHA512

    115d0014db59d8ffe990ca8b686e8cb12644626e1b657fd6f8b2b24ffc2b3703369b5c815cc8e8f2a37e9a48f974dd592ff6d491ccebc97ccbf2f1d8da035f80

  • SSDEEP

    6144:CpHIcFeEK/fObT/bGibErxUyF+fmYYdPMAaiSeg:C5IcFeEK/fObT/bGiPo+eYYt/LSeg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      76b7f8f5c4e92c938d4a2ff504a52eb2ed5ee07c6879a4d80cf91f2c631a2bbf

    • Size

      320KB

    • MD5

      5965790c4d4f6f570563d9f658225450

    • SHA1

      f9893bbe4d7337239481a250d41b68133b4892e9

    • SHA256

      76b7f8f5c4e92c938d4a2ff504a52eb2ed5ee07c6879a4d80cf91f2c631a2bbf

    • SHA512

      115d0014db59d8ffe990ca8b686e8cb12644626e1b657fd6f8b2b24ffc2b3703369b5c815cc8e8f2a37e9a48f974dd592ff6d491ccebc97ccbf2f1d8da035f80

    • SSDEEP

      6144:CpHIcFeEK/fObT/bGibErxUyF+fmYYdPMAaiSeg:C5IcFeEK/fObT/bGiPo+eYYt/LSeg

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks