Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

b613fa5204...75.exe

windows7-x64

10

b613fa5204...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b613fa52042bc462d46517c389d8fb262423d1e47868711119c779ee5f4ee375

  • Size

    132KB

  • Sample

    221202-a4hthsgb49

  • MD5

    76f5395af0f774bab318e573c4e293e4

  • SHA1

    b47742669004661ed5dc559ef68cb19fcc978a74

  • SHA256

    b613fa52042bc462d46517c389d8fb262423d1e47868711119c779ee5f4ee375

  • SHA512

    01edb57dab8680e16aa123568724d325f16d4d7d4b7ecee3919c561a1ceece9a9f07bed69a63abdf7d9083586e71426f6dd05364a810820545ffac01c96b130a

  • SSDEEP

    1536:uym4Q/T5/H6rM2qEbBkIvI4DyQDIws/HmmYbRdfuL0wo7JaS1:vQ/TpH63qEbBkn4e2s/HmlTfdwQL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b613fa52042bc462d46517c389d8fb262423d1e47868711119c779ee5f4ee375

    • Size

      132KB

    • MD5

      76f5395af0f774bab318e573c4e293e4

    • SHA1

      b47742669004661ed5dc559ef68cb19fcc978a74

    • SHA256

      b613fa52042bc462d46517c389d8fb262423d1e47868711119c779ee5f4ee375

    • SHA512

      01edb57dab8680e16aa123568724d325f16d4d7d4b7ecee3919c561a1ceece9a9f07bed69a63abdf7d9083586e71426f6dd05364a810820545ffac01c96b130a

    • SSDEEP

      1536:uym4Q/T5/H6rM2qEbBkIvI4DyQDIws/HmmYbRdfuL0wo7JaS1:vQ/TpH63qEbBkn4e2s/HmlTfdwQL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks