Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

d13370c4f5...80.exe

windows7-x64

9

d13370c4f5...80.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d13370c4f54fa8b2eb0f74bb3d57a0f054d681472863b2a5e400dd53433bef80

  • Size

    601KB

  • Sample

    221127-k1anvaeb27

  • MD5

    3952f6ce7edf220a878e2f37c9c575d6

  • SHA1

    e82e5c2a97847033740d9a8ed4bedd43c25d10f8

  • SHA256

    d13370c4f54fa8b2eb0f74bb3d57a0f054d681472863b2a5e400dd53433bef80

  • SHA512

    b3fcd6dadf9cd75a0b80a74c4a1c4ed8244a69058bda1baff6536d7521295057e99a3a1c9c2b9414c2c8fba3e9f8877fb1dd7ca493479b362699b0f91bfbb669

  • SSDEEP

    12288:xORNsuj7LM2e2Bl4St2AxKeAN+GKnvLof/9WraN0bfs3kZwD+ZAdqG:xsNsmM2lBmSt2A+yTof/YrdfqkZwD4Av

Score
9/10
evasion

Malware Config

Targets

    • Target

      d13370c4f54fa8b2eb0f74bb3d57a0f054d681472863b2a5e400dd53433bef80

    • Size

      601KB

    • MD5

      3952f6ce7edf220a878e2f37c9c575d6

    • SHA1

      e82e5c2a97847033740d9a8ed4bedd43c25d10f8

    • SHA256

      d13370c4f54fa8b2eb0f74bb3d57a0f054d681472863b2a5e400dd53433bef80

    • SHA512

      b3fcd6dadf9cd75a0b80a74c4a1c4ed8244a69058bda1baff6536d7521295057e99a3a1c9c2b9414c2c8fba3e9f8877fb1dd7ca493479b362699b0f91bfbb669

    • SSDEEP

      12288:xORNsuj7LM2e2Bl4St2AxKeAN+GKnvLof/9WraN0bfs3kZwD+ZAdqG:xsNsmM2lBmSt2A+yTof/YrdfqkZwD4Av

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks