d4d8e376398bccf497c2b304f3648ff7e0c0ef93e54f71ebd41ae4742dc90bba | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

d4d8e37639...ba.exe

windows7-x64

9

d4d8e37639...ba.exe

windows10-2004-x64

9

Sharing

General

Target

d4d8e376398bccf497c2b304f3648ff7e0c0ef93e54f71ebd41ae4742dc90bba
Size

512KB
Sample

221128-bgjyqscf69
MD5

1ffcdeed85ec1a839d01ec15378ba74d
SHA1

bc5cfffe1b080c59d9cd61d3d9eb3f9cf3c0f632
SHA256

d4d8e376398bccf497c2b304f3648ff7e0c0ef93e54f71ebd41ae4742dc90bba
SHA512

0eacbf258a6a31c77ba5d6071a90f721a2b6de64e4df5fa0a1da5583474c097462fb8938fa885c80debaf1f29a9dbef3e239dea0a224f074ecbab69ed302a4e0
SSDEEP

12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4V:0+h9OY70z+warul3E4V

Score

9^/10

evasion

Static task

static1

Behavioral task

behavioral1

Sample

d4d8e376398bccf497c2b304f3648ff7e0c0ef93e54f71ebd41ae4742dc90bba.exe

Resource

win7-20220812-en

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

d4d8e376398bccf497c2b304f3648ff7e0c0ef93e54f71ebd41ae4742dc90bba.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  d4d8e376398bccf497c2b304f3648ff7e0c0ef93e54f71ebd41ae4742dc90bba
- Size
  
  512KB
- MD5
  
  1ffcdeed85ec1a839d01ec15378ba74d
- SHA1
  
  bc5cfffe1b080c59d9cd61d3d9eb3f9cf3c0f632
- SHA256
  
  d4d8e376398bccf497c2b304f3648ff7e0c0ef93e54f71ebd41ae4742dc90bba
- SHA512
  
  0eacbf258a6a31c77ba5d6071a90f721a2b6de64e4df5fa0a1da5583474c097462fb8938fa885c80debaf1f29a9dbef3e239dea0a224f074ecbab69ed302a4e0
- SSDEEP
  
  12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4V:0+h9OY70z+warul3E4V
Score

9^/10

evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.