Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

73b9918ab3...47.exe

windows7-x64

10

73b9918ab3...47.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73b9918ab31e9e2f32c766ab84032563608c734ed434878257bd1512fe11e947

  • Size

    100KB

  • Sample

    221202-1bbgvaae6v

  • MD5

    d2c41cd8ad89eebb63b469a7d8e7c5b8

  • SHA1

    d76a75d40543282c68d8697e3bcf9d636f2c3b31

  • SHA256

    73b9918ab31e9e2f32c766ab84032563608c734ed434878257bd1512fe11e947

  • SHA512

    6026118b71e439e23c143a512f9a22eb96080778f22e4f2b6159ccfe283e171186200abe75fc8102538281502209c718d0fd67d51e48830d8bfd57a8587bf3cf

  • SSDEEP

    1536:F3tGR82NTzw82MGAc4ohrPXo+73Rez8b0Sy2NIjnZMd:4wcurPX7C2Cned

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      73b9918ab31e9e2f32c766ab84032563608c734ed434878257bd1512fe11e947

    • Size

      100KB

    • MD5

      d2c41cd8ad89eebb63b469a7d8e7c5b8

    • SHA1

      d76a75d40543282c68d8697e3bcf9d636f2c3b31

    • SHA256

      73b9918ab31e9e2f32c766ab84032563608c734ed434878257bd1512fe11e947

    • SHA512

      6026118b71e439e23c143a512f9a22eb96080778f22e4f2b6159ccfe283e171186200abe75fc8102538281502209c718d0fd67d51e48830d8bfd57a8587bf3cf

    • SSDEEP

      1536:F3tGR82NTzw82MGAc4ohrPXo+73Rez8b0Sy2NIjnZMd:4wcurPX7C2Cned

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks