Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6c880ae7c4...11.exe

windows7-x64

10

6c880ae7c4...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c880ae7c4d42650ee6ba6dd8e9e971f9cf4a532364fc83cf6efe54070371a11

  • Size

    204KB

  • Sample

    221201-3bv8csef9t

  • MD5

    1baa7c8a077d2bb486d82e2a7b0fcb60

  • SHA1

    44fdea9eae05bb0f51240e44c658bff49bd33e7a

  • SHA256

    6c880ae7c4d42650ee6ba6dd8e9e971f9cf4a532364fc83cf6efe54070371a11

  • SHA512

    cb7b1672ea4766b7657ab3f2f3eb1fe3c1ec5f348bdf58b577509cab30ea6d46593b23108653a9b5cea5ca42057a04a7ded400804d845e300fd2b4dd4f2f1152

  • SSDEEP

    3072:lyRb9GffGv4rPFQJcaitfdE1Y1wuUBcQZfYW:X42PFKc39diY1wcc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6c880ae7c4d42650ee6ba6dd8e9e971f9cf4a532364fc83cf6efe54070371a11

    • Size

      204KB

    • MD5

      1baa7c8a077d2bb486d82e2a7b0fcb60

    • SHA1

      44fdea9eae05bb0f51240e44c658bff49bd33e7a

    • SHA256

      6c880ae7c4d42650ee6ba6dd8e9e971f9cf4a532364fc83cf6efe54070371a11

    • SHA512

      cb7b1672ea4766b7657ab3f2f3eb1fe3c1ec5f348bdf58b577509cab30ea6d46593b23108653a9b5cea5ca42057a04a7ded400804d845e300fd2b4dd4f2f1152

    • SSDEEP

      3072:lyRb9GffGv4rPFQJcaitfdE1Y1wuUBcQZfYW:X42PFKc39diY1wcc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks