Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

860a22f001...65.exe

windows7-x64

10

860a22f001...65.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    860a22f0011d8aa1f33c73ed3e6fc583d87df788b300228d8c79d30b98e45865

  • Size

    140KB

  • Sample

    221202-3nnztaeh39

  • MD5

    65ceb197ff62f2f8e5ed115f0d0e29c0

  • SHA1

    95a087e5e2267527175682558674ae0eed15d56e

  • SHA256

    860a22f0011d8aa1f33c73ed3e6fc583d87df788b300228d8c79d30b98e45865

  • SHA512

    ed9f991461e4785e0c571e3ef953130a99b81f64d029cc054a737a8561fecf4d84128d99e089ecac8f4c1b3e6b53dd6ab6daf3282569b3df72efbe0223078a0e

  • SSDEEP

    3072:oRW/acOaPAD0Ej5afJMgE/2DyjuBzMuDuf3tbFR9EBoPf0vXYn:B/Yaw0Ej5aNBzMsgiv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      860a22f0011d8aa1f33c73ed3e6fc583d87df788b300228d8c79d30b98e45865

    • Size

      140KB

    • MD5

      65ceb197ff62f2f8e5ed115f0d0e29c0

    • SHA1

      95a087e5e2267527175682558674ae0eed15d56e

    • SHA256

      860a22f0011d8aa1f33c73ed3e6fc583d87df788b300228d8c79d30b98e45865

    • SHA512

      ed9f991461e4785e0c571e3ef953130a99b81f64d029cc054a737a8561fecf4d84128d99e089ecac8f4c1b3e6b53dd6ab6daf3282569b3df72efbe0223078a0e

    • SSDEEP

      3072:oRW/acOaPAD0Ej5afJMgE/2DyjuBzMuDuf3tbFR9EBoPf0vXYn:B/Yaw0Ej5aNBzMsgiv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks