Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

50563068ec...17.exe

windows7-x64

10

50563068ec...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50563068eccf62f884fda0cea3236f5aab488772b9cfcadde28492c338ba9617

  • Size

    184KB

  • Sample

    221203-x6bvbacg7y

  • MD5

    286ecb4a7f76131d2d9438818cd56050

  • SHA1

    596c8b6f9f025a6fa0f73fb85b06587c15a2a685

  • SHA256

    50563068eccf62f884fda0cea3236f5aab488772b9cfcadde28492c338ba9617

  • SHA512

    5d6330bf4e00d000cd0642746597c80f9c73a4b62f33915b0c659bd00e8e043fc6b342beb3293d344a74b60310ad6592db29a446ab9448ca60819a773c70b072

  • SSDEEP

    3072:E3e3irjob64QDLw4fUbaxoOGM7J0Z4y1oEc2xtq1cy4aqosAm+w90ZC4:O9c4egCby4aqosAm+w90z

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      50563068eccf62f884fda0cea3236f5aab488772b9cfcadde28492c338ba9617

    • Size

      184KB

    • MD5

      286ecb4a7f76131d2d9438818cd56050

    • SHA1

      596c8b6f9f025a6fa0f73fb85b06587c15a2a685

    • SHA256

      50563068eccf62f884fda0cea3236f5aab488772b9cfcadde28492c338ba9617

    • SHA512

      5d6330bf4e00d000cd0642746597c80f9c73a4b62f33915b0c659bd00e8e043fc6b342beb3293d344a74b60310ad6592db29a446ab9448ca60819a773c70b072

    • SSDEEP

      3072:E3e3irjob64QDLw4fUbaxoOGM7J0Z4y1oEc2xtq1cy4aqosAm+w90ZC4:O9c4egCby4aqosAm+w90z

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks