Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

ee68af4b82...84.exe

windows7-x64

9

ee68af4b82...84.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee68af4b82fbe47a2b3ece5865efaf41a2d331fd7b94f349d09cac039a799284

  • Size

    512KB

  • Sample

    221128-hhhwdsch95

  • MD5

    bbadecb163e53e38c461898b6800f873

  • SHA1

    72d835dbdf208351177239184b5c28332f2c9144

  • SHA256

    ee68af4b82fbe47a2b3ece5865efaf41a2d331fd7b94f349d09cac039a799284

  • SHA512

    1e9fff66d407489ba9b60ad4ea5c47e9d3d4e9c0b0068473d90efcf168985e3555f5fba206bb7399e920cc980d56a9e3354d27a4ad04d7c2ab0553fe95ec4e82

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4b:0+h9OY70z+warul3E4b

Score
9/10
evasion

Malware Config

Targets

    • Target

      ee68af4b82fbe47a2b3ece5865efaf41a2d331fd7b94f349d09cac039a799284

    • Size

      512KB

    • MD5

      bbadecb163e53e38c461898b6800f873

    • SHA1

      72d835dbdf208351177239184b5c28332f2c9144

    • SHA256

      ee68af4b82fbe47a2b3ece5865efaf41a2d331fd7b94f349d09cac039a799284

    • SHA512

      1e9fff66d407489ba9b60ad4ea5c47e9d3d4e9c0b0068473d90efcf168985e3555f5fba206bb7399e920cc980d56a9e3354d27a4ad04d7c2ab0553fe95ec4e82

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4b:0+h9OY70z+warul3E4b

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks