Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

ebc2b3a32a...fd.exe

windows7-x64

9

ebc2b3a32a...fd.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebc2b3a32ab09a4f08fe3d0dbdd2022cfaf88abcfb48436613af27ece6bc9ffd

  • Size

    625KB

  • Sample

    221127-mf4sasab42

  • MD5

    d0b364f822671f87eb9d4770e11ecb14

  • SHA1

    bafe475014d7e6f2e9cc6cbbcad91f3096d8e5f4

  • SHA256

    ebc2b3a32ab09a4f08fe3d0dbdd2022cfaf88abcfb48436613af27ece6bc9ffd

  • SHA512

    4f3ccbbd81f09903f42a5966114c80c971cb3066d319b3238fb5ea6ecc690a728ae8207a8f6772b6ebca5ad8789178eda29a818c8bdbde7e4d8cc8eaa14c8f85

  • SSDEEP

    12288:hg+gjjwmSK3ALgXgxvFDyfD1XBxzHMT0jZOJk7j4epPfArQyX0kZ2GEV4gB4IjY3:CjjwS3UW0NKhXLNjZzTPIrQu0kZCV4gS

Score
9/10
evasion

Malware Config

Targets

    • Target

      ebc2b3a32ab09a4f08fe3d0dbdd2022cfaf88abcfb48436613af27ece6bc9ffd

    • Size

      625KB

    • MD5

      d0b364f822671f87eb9d4770e11ecb14

    • SHA1

      bafe475014d7e6f2e9cc6cbbcad91f3096d8e5f4

    • SHA256

      ebc2b3a32ab09a4f08fe3d0dbdd2022cfaf88abcfb48436613af27ece6bc9ffd

    • SHA512

      4f3ccbbd81f09903f42a5966114c80c971cb3066d319b3238fb5ea6ecc690a728ae8207a8f6772b6ebca5ad8789178eda29a818c8bdbde7e4d8cc8eaa14c8f85

    • SSDEEP

      12288:hg+gjjwmSK3ALgXgxvFDyfD1XBxzHMT0jZOJk7j4epPfArQyX0kZ2GEV4gB4IjY3:CjjwS3UW0NKhXLNjZzTPIrQu0kZCV4gS

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks