Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

f6abdc048f...9f.exe

windows7-x64

9

f6abdc048f...9f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f

  • Size

    512KB

  • Sample

    221128-he714sgh8w

  • MD5

    0d9cfaa2caff3eadc983c77ea75e4cdb

  • SHA1

    2e9d68670a45398b9f3d6a3e7b2af40ce02bcb5b

  • SHA256

    f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f

  • SHA512

    866b43f347fbdf333f1f036175046bc1459cf17e8e38a94f5b2fc14a5d41772ec925660de5b28f960343d064e8e9d81c131ec356b060ce2621e35d3b4ecaca5e

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4d:0+h9OY70z+warul3E4d

Score
9/10
evasion

Malware Config

Targets

    • Target

      f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f

    • Size

      512KB

    • MD5

      0d9cfaa2caff3eadc983c77ea75e4cdb

    • SHA1

      2e9d68670a45398b9f3d6a3e7b2af40ce02bcb5b

    • SHA256

      f6abdc048f7de832e68d830fefc8d015409b4701fc6c8b3e8eef7ae9b566679f

    • SHA512

      866b43f347fbdf333f1f036175046bc1459cf17e8e38a94f5b2fc14a5d41772ec925660de5b28f960343d064e8e9d81c131ec356b060ce2621e35d3b4ecaca5e

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4d:0+h9OY70z+warul3E4d

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks