Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

bf055949c7...bc.exe

windows7-x64

9

bf055949c7...bc.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc

  • Size

    624KB

  • Sample

    221127-k6mwcsee77

  • MD5

    4dd55b9bfef37ff24244b77e7be0d5c2

  • SHA1

    56e18311e084ade4dc52761527eb25e8a56ed357

  • SHA256

    bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc

  • SHA512

    73d12057d7147304dc2bb8a09522463f72f98d63df7e57f81023bc5fe5c7237845c59059d388328414a2bf7e423f289bc62bbcc756fa8cf25557b2836cb46bde

  • SSDEEP

    12288:p93rW92itxpUGx1I/mCEUaQ9b0WF+cf6vDbRI4LBvhRybnlf61Y+Q:3W92kUGx/s9bSvDbRlJ0bn81Y+Q

Score
9/10
evasion

Malware Config

Targets

    • Target

      bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc

    • Size

      624KB

    • MD5

      4dd55b9bfef37ff24244b77e7be0d5c2

    • SHA1

      56e18311e084ade4dc52761527eb25e8a56ed357

    • SHA256

      bf055949c7a2ed392792b2a2b8e46c034d0636564f5fa7dbfda94f235533ecbc

    • SHA512

      73d12057d7147304dc2bb8a09522463f72f98d63df7e57f81023bc5fe5c7237845c59059d388328414a2bf7e423f289bc62bbcc756fa8cf25557b2836cb46bde

    • SSDEEP

      12288:p93rW92itxpUGx1I/mCEUaQ9b0WF+cf6vDbRI4LBvhRybnlf61Y+Q:3W92kUGx/s9bSvDbRlJ0bn81Y+Q

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks