Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

ab58eb6ed7...df.exe

windows7-x64

10

ab58eb6ed7...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab58eb6ed7a63d0e8e442c3ce19f12fcd0f408582fd3aa6e37aa371bc272cbdf

  • Size

    248KB

  • Sample

    221201-j9ztnaea7y

  • MD5

    3729c333a99d8a9f84382b9349442bbb

  • SHA1

    655e7a184eaf82738b84dc2af450e55c782dd074

  • SHA256

    ab58eb6ed7a63d0e8e442c3ce19f12fcd0f408582fd3aa6e37aa371bc272cbdf

  • SHA512

    05d42b0c1ebbf6ff8a56586ea7c99c8a8077a3966005e1e9b585dac55bdef22ab14183c73c4f34d6ab59477b381a4a2c4ae5d034132a3a72d8062de2e2ee0816

  • SSDEEP

    3072:Qm38bUQSx5jJhU8hPsOkQJeJ7JwJHJ6JkBTriGXfXkGN3tqZ4xoRg4Sx+Tidcpfg:pUUBdhh3op2pYOF0yIdGFGO

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ab58eb6ed7a63d0e8e442c3ce19f12fcd0f408582fd3aa6e37aa371bc272cbdf

    • Size

      248KB

    • MD5

      3729c333a99d8a9f84382b9349442bbb

    • SHA1

      655e7a184eaf82738b84dc2af450e55c782dd074

    • SHA256

      ab58eb6ed7a63d0e8e442c3ce19f12fcd0f408582fd3aa6e37aa371bc272cbdf

    • SHA512

      05d42b0c1ebbf6ff8a56586ea7c99c8a8077a3966005e1e9b585dac55bdef22ab14183c73c4f34d6ab59477b381a4a2c4ae5d034132a3a72d8062de2e2ee0816

    • SSDEEP

      3072:Qm38bUQSx5jJhU8hPsOkQJeJ7JwJHJ6JkBTriGXfXkGN3tqZ4xoRg4Sx+Tidcpfg:pUUBdhh3op2pYOF0yIdGFGO

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks