Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7966922c26...65.exe

windows7-x64

8

7966922c26...65.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7966922c26c3e78b28ce1d51fb6ed85e4a8fad7b3187bdb31a59355572110e65

  • Size

    2.7MB

  • Sample

    221201-ssstfsbf87

  • MD5

    9e659727fabfd9da06acb1071f083379

  • SHA1

    4ad139850cdac9a2eb4832bd4795f40c162bbccb

  • SHA256

    7966922c26c3e78b28ce1d51fb6ed85e4a8fad7b3187bdb31a59355572110e65

  • SHA512

    7b1a142cd74962e51f769c229a8a3f4d7bb46a2a200db4f8e6807ee79355c1a4f971d26e113bf48b70cc1ea283704a7c2671f0127a68b8ea322eb56485590722

  • SSDEEP

    49152:m4IvhmY1pu2asY6DwOBfrnvV7UeWtSF/RxdI6vY80Wl/Rvnqw5bxSowDrHy:mrvhd1pdYiwOBpIeWYF/iPWl/9qw5bQI

Score
8/10

Malware Config

Targets

    • Target

      7966922c26c3e78b28ce1d51fb6ed85e4a8fad7b3187bdb31a59355572110e65

    • Size

      2.7MB

    • MD5

      9e659727fabfd9da06acb1071f083379

    • SHA1

      4ad139850cdac9a2eb4832bd4795f40c162bbccb

    • SHA256

      7966922c26c3e78b28ce1d51fb6ed85e4a8fad7b3187bdb31a59355572110e65

    • SHA512

      7b1a142cd74962e51f769c229a8a3f4d7bb46a2a200db4f8e6807ee79355c1a4f971d26e113bf48b70cc1ea283704a7c2671f0127a68b8ea322eb56485590722

    • SSDEEP

      49152:m4IvhmY1pu2asY6DwOBfrnvV7UeWtSF/RxdI6vY80Wl/Rvnqw5bxSowDrHy:mrvhd1pdYiwOBpIeWYF/iPWl/9qw5bQI

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks