Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

e33cbc09f4...38.exe

windows7-x64

10

e33cbc09f4...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e33cbc09f491b96d457f29de6855eaff681984bbf138d3f4576bed22bd68fa38

  • Size

    248KB

  • Sample

    221129-t3btcshh71

  • MD5

    57f0412f08760330c2a2ac2a341b90e0

  • SHA1

    d6aca870cc491c1284c0ac566512d6719fd86b8b

  • SHA256

    e33cbc09f491b96d457f29de6855eaff681984bbf138d3f4576bed22bd68fa38

  • SHA512

    bd6b5b1fc475d8c91daa3c7aae86e7a3a4d025f6e14afc8a212cb13a0cd71c39f5f3ca0142cee1852842f6ad0a3aed7e1b80e9ddffb4c4eef33eca35862667c6

  • SSDEEP

    3072:+R4XzdJvRlFD1yPBYEmaHtGG2gqZ+/9A+JRjKY5Md41gfLX:P/h1yPptGG2gqZ+FfKqDs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e33cbc09f491b96d457f29de6855eaff681984bbf138d3f4576bed22bd68fa38

    • Size

      248KB

    • MD5

      57f0412f08760330c2a2ac2a341b90e0

    • SHA1

      d6aca870cc491c1284c0ac566512d6719fd86b8b

    • SHA256

      e33cbc09f491b96d457f29de6855eaff681984bbf138d3f4576bed22bd68fa38

    • SHA512

      bd6b5b1fc475d8c91daa3c7aae86e7a3a4d025f6e14afc8a212cb13a0cd71c39f5f3ca0142cee1852842f6ad0a3aed7e1b80e9ddffb4c4eef33eca35862667c6

    • SSDEEP

      3072:+R4XzdJvRlFD1yPBYEmaHtGG2gqZ+/9A+JRjKY5Md41gfLX:P/h1yPptGG2gqZ+FfKqDs

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks