Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

cb9fceae50...db.exe

windows7-x64

10

cb9fceae50...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb9fceae5074208f0225cbc843b0b687cd10c73c23f8e1cc53d9a777c5728edb

  • Size

    92KB

  • Sample

    221201-2kyjeahb47

  • MD5

    8e4b700bb4dbad6bb9d09b41dac75c3d

  • SHA1

    d4a6a3056b34da16ace905c75fdbe4124fdf84b9

  • SHA256

    cb9fceae5074208f0225cbc843b0b687cd10c73c23f8e1cc53d9a777c5728edb

  • SHA512

    f41b93e3bc6834aef96e64682833384442c1e54373a71bd2dfda95d58152f2d5d81a53ed2af8fe6cc28a5af804813d01ab7db5b7435a4142f97134d68e7fe6ec

  • SSDEEP

    1536:5IibhPjjBkvWN/3HgGl+yocTzFJ0T72Vp3/:es7/H5BTzFJ0T72L/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cb9fceae5074208f0225cbc843b0b687cd10c73c23f8e1cc53d9a777c5728edb

    • Size

      92KB

    • MD5

      8e4b700bb4dbad6bb9d09b41dac75c3d

    • SHA1

      d4a6a3056b34da16ace905c75fdbe4124fdf84b9

    • SHA256

      cb9fceae5074208f0225cbc843b0b687cd10c73c23f8e1cc53d9a777c5728edb

    • SHA512

      f41b93e3bc6834aef96e64682833384442c1e54373a71bd2dfda95d58152f2d5d81a53ed2af8fe6cc28a5af804813d01ab7db5b7435a4142f97134d68e7fe6ec

    • SSDEEP

      1536:5IibhPjjBkvWN/3HgGl+yocTzFJ0T72Vp3/:es7/H5BTzFJ0T72L/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks