Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7ff18b22a0...49.exe

windows7-x64

10

7ff18b22a0...49.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ff18b22a074afb8863c6ce1696f0315237022e1ec18641fbf2c91cfb3e3a749

  • Size

    132KB

  • Sample

    221204-a38csafg2w

  • MD5

    13204159358b8c95555fbe92d48c11d0

  • SHA1

    561b4ccfb2329d3a0c328a0d545c61b3301f3d13

  • SHA256

    7ff18b22a074afb8863c6ce1696f0315237022e1ec18641fbf2c91cfb3e3a749

  • SHA512

    2b29315ad2cf1ddd996615ff1bbf8f9718c9d5b9c90e4a66e90911de6117424bacee78caf5721e643b921f59103dc37315017616f88b906f386443714a141a92

  • SSDEEP

    3072:0fHcxsYbtX6RzvyuOi89Sey1AKWZXl7miWmn/Aoe:0f3OtX6RzvyuOQesWbScA

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7ff18b22a074afb8863c6ce1696f0315237022e1ec18641fbf2c91cfb3e3a749

    • Size

      132KB

    • MD5

      13204159358b8c95555fbe92d48c11d0

    • SHA1

      561b4ccfb2329d3a0c328a0d545c61b3301f3d13

    • SHA256

      7ff18b22a074afb8863c6ce1696f0315237022e1ec18641fbf2c91cfb3e3a749

    • SHA512

      2b29315ad2cf1ddd996615ff1bbf8f9718c9d5b9c90e4a66e90911de6117424bacee78caf5721e643b921f59103dc37315017616f88b906f386443714a141a92

    • SSDEEP

      3072:0fHcxsYbtX6RzvyuOi89Sey1AKWZXl7miWmn/Aoe:0f3OtX6RzvyuOQesWbScA

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks