Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

eb0b0aae02...6c.exe

windows7-x64

10

eb0b0aae02...6c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb0b0aae02cdb9b7e089c1777c8b0812684999f0ad2494c8a7cb03c1654cdd6c

  • Size

    152KB

  • Sample

    221203-ywmz9sfc61

  • MD5

    fad644ff815a163062309b3f4c921e8d

  • SHA1

    c0fcdfc18dfbaddf439c582e5661887d5bde0d14

  • SHA256

    eb0b0aae02cdb9b7e089c1777c8b0812684999f0ad2494c8a7cb03c1654cdd6c

  • SHA512

    603434458633d95b084ad3876c5445a5b840e7a211b6aa9fcc99ab9e84ccd292f050f0101eb17af756426c4b70ad1c2772acbe0458c260d94551cddcb7486acb

  • SSDEEP

    3072:Urdsw3SLk8KvAmRPveYlUq/kzPi0gEr+YsBYPAZ1KHiLwcIaZ154oQZiEkV:ACLrEGaUq8iHEXsCJR8ZdWs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eb0b0aae02cdb9b7e089c1777c8b0812684999f0ad2494c8a7cb03c1654cdd6c

    • Size

      152KB

    • MD5

      fad644ff815a163062309b3f4c921e8d

    • SHA1

      c0fcdfc18dfbaddf439c582e5661887d5bde0d14

    • SHA256

      eb0b0aae02cdb9b7e089c1777c8b0812684999f0ad2494c8a7cb03c1654cdd6c

    • SHA512

      603434458633d95b084ad3876c5445a5b840e7a211b6aa9fcc99ab9e84ccd292f050f0101eb17af756426c4b70ad1c2772acbe0458c260d94551cddcb7486acb

    • SSDEEP

      3072:Urdsw3SLk8KvAmRPveYlUq/kzPi0gEr+YsBYPAZ1KHiLwcIaZ154oQZiEkV:ACLrEGaUq8iHEXsCJR8ZdWs

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks