Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6d92692138...b8.exe

windows7-x64

10

6d92692138...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d926921383dd301e4ad274022b460c7f253911d3f12a31b76efdd48d33cf0b8

  • Size

    180KB

  • Sample

    221202-amd41aab2t

  • MD5

    7b88cf0836242ea57c766f59bf59aee1

  • SHA1

    10e9c4c3c504b6679f5925d3bfb216baf2632ed3

  • SHA256

    6d926921383dd301e4ad274022b460c7f253911d3f12a31b76efdd48d33cf0b8

  • SHA512

    4d6ad7f6b22f0c6ec4ec91e198c7860c1917cc3aa9d7bcb29a85fe4157f847a7cf7395ed899f17d8e38c40353956711a151fbe1e81c997642428a2352b4fa06e

  • SSDEEP

    3072:qFK3d1MlttMFz8o+F334VSlkfoyHYb/zCHPEhg5JN8x+eDfcAuQPUSnrul8P:qFw1MltKaJkHHYb/zCHPEhg5JN8x+eD1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6d926921383dd301e4ad274022b460c7f253911d3f12a31b76efdd48d33cf0b8

    • Size

      180KB

    • MD5

      7b88cf0836242ea57c766f59bf59aee1

    • SHA1

      10e9c4c3c504b6679f5925d3bfb216baf2632ed3

    • SHA256

      6d926921383dd301e4ad274022b460c7f253911d3f12a31b76efdd48d33cf0b8

    • SHA512

      4d6ad7f6b22f0c6ec4ec91e198c7860c1917cc3aa9d7bcb29a85fe4157f847a7cf7395ed899f17d8e38c40353956711a151fbe1e81c997642428a2352b4fa06e

    • SSDEEP

      3072:qFK3d1MlttMFz8o+F334VSlkfoyHYb/zCHPEhg5JN8x+eDfcAuQPUSnrul8P:qFw1MltKaJkHHYb/zCHPEhg5JN8x+eD1

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks