Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

2cc601515f...2b.exe

windows7-x64

10

2cc601515f...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cc601515f340fc32b557a2f009e5ad47ff9bc4e4436060c9f6b0a75b0543b2b

  • Size

    140KB

  • Sample

    221123-zq62magf31

  • MD5

    43d864e644fceba34c844320f72e446e

  • SHA1

    48e69f0441fca99a81c380253b3a55a5d14d3cad

  • SHA256

    2cc601515f340fc32b557a2f009e5ad47ff9bc4e4436060c9f6b0a75b0543b2b

  • SHA512

    3d7e069451232de9658b217a26a1ee28d456555852e861106b432660a522f39a8e4d0c5abbd1e68869f5dfe215ebedf7183a2651ac1cec7777427061b1518da1

  • SSDEEP

    768:zCzMyyt4pd04q0zik+vhy7g0EM/LinbQO55yU:WveEn3+pCg0EUGQO+U

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2cc601515f340fc32b557a2f009e5ad47ff9bc4e4436060c9f6b0a75b0543b2b

    • Size

      140KB

    • MD5

      43d864e644fceba34c844320f72e446e

    • SHA1

      48e69f0441fca99a81c380253b3a55a5d14d3cad

    • SHA256

      2cc601515f340fc32b557a2f009e5ad47ff9bc4e4436060c9f6b0a75b0543b2b

    • SHA512

      3d7e069451232de9658b217a26a1ee28d456555852e861106b432660a522f39a8e4d0c5abbd1e68869f5dfe215ebedf7183a2651ac1cec7777427061b1518da1

    • SSDEEP

      768:zCzMyyt4pd04q0zik+vhy7g0EM/LinbQO55yU:WveEn3+pCg0EUGQO+U

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks