Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

b9ce8503fc...fb.exe

windows7-x64

10

b9ce8503fc...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9ce8503fc41a11bf3da60d6de3b63a1c79a1309156aa8aa16673a100ae58ffb

  • Size

    204KB

  • Sample

    221129-vqak7shc59

  • MD5

    17eb8f9b0687ca1c1a3f71024e071a99

  • SHA1

    43ec9d158b838bfc24c6ab6b0f956e40d5572130

  • SHA256

    b9ce8503fc41a11bf3da60d6de3b63a1c79a1309156aa8aa16673a100ae58ffb

  • SHA512

    d16f2dc6690b258b29baabe08d6ea34368ab37c28ca9982acc0fd26ab8b1da099de7b94c4746a5d8a5aa5d10e01382691f845f1690a6dcb3d1c3af103954ff45

  • SSDEEP

    1536:F6+OofHo1vzxHwxhZxNy3tQ9CW5EZWHakMwP9W6uXNh9h1AWa11GBPIdRONd+w67:rHo160tQ9nLHbB9WTk9+Jgqmlt5V

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b9ce8503fc41a11bf3da60d6de3b63a1c79a1309156aa8aa16673a100ae58ffb

    • Size

      204KB

    • MD5

      17eb8f9b0687ca1c1a3f71024e071a99

    • SHA1

      43ec9d158b838bfc24c6ab6b0f956e40d5572130

    • SHA256

      b9ce8503fc41a11bf3da60d6de3b63a1c79a1309156aa8aa16673a100ae58ffb

    • SHA512

      d16f2dc6690b258b29baabe08d6ea34368ab37c28ca9982acc0fd26ab8b1da099de7b94c4746a5d8a5aa5d10e01382691f845f1690a6dcb3d1c3af103954ff45

    • SSDEEP

      1536:F6+OofHo1vzxHwxhZxNy3tQ9CW5EZWHakMwP9W6uXNh9h1AWa11GBPIdRONd+w67:rHo160tQ9nLHbB9WTk9+Jgqmlt5V

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks