Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

b01aba1da7...65.exe

windows7-x64

8

b01aba1da7...65.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b01aba1da74e1749fd44ed90bb1cba201ee58dd5963409b36db0b0fbcda0b565

  • Size

    276KB

  • Sample

    221127-2lvh5shg31

  • MD5

    d4d1ef3438416b383eb52de196980936

  • SHA1

    a264c7ec3434c08ac0380dc27f3f766867c6ba0e

  • SHA256

    b01aba1da74e1749fd44ed90bb1cba201ee58dd5963409b36db0b0fbcda0b565

  • SHA512

    9100ec5e0a6172b961c62707d41ece7dec071bd569803d3770466c3f633294ea72d5bc833aac69a7eff8efc29c2441cc1ddae0143958dac0a411b1acfd0cb714

  • SSDEEP

    3072:9AzyaPGxAufmotkVzqx227rqI3kv6qr2cS4Vb9uFFFFFFFFFFFFFFFFFFFFMBtRE:9A+KBuop2XPqr44Vb9zrRWT

Score
8/10
persistence

Malware Config

Targets

    • Target

      b01aba1da74e1749fd44ed90bb1cba201ee58dd5963409b36db0b0fbcda0b565

    • Size

      276KB

    • MD5

      d4d1ef3438416b383eb52de196980936

    • SHA1

      a264c7ec3434c08ac0380dc27f3f766867c6ba0e

    • SHA256

      b01aba1da74e1749fd44ed90bb1cba201ee58dd5963409b36db0b0fbcda0b565

    • SHA512

      9100ec5e0a6172b961c62707d41ece7dec071bd569803d3770466c3f633294ea72d5bc833aac69a7eff8efc29c2441cc1ddae0143958dac0a411b1acfd0cb714

    • SSDEEP

      3072:9AzyaPGxAufmotkVzqx227rqI3kv6qr2cS4Vb9uFFFFFFFFFFFFFFFFFFFFMBtRE:9A+KBuop2XPqr44Vb9zrRWT

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks