Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

9bb225940c...0f.exe

windows7-x64

8

9bb225940c...0f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9bb225940c0789de800546f76067ed6ea0582fca756143e3402dcb5cb1d17a0f

  • Size

    7.2MB

  • Sample

    221204-lzervacf91

  • MD5

    03897d36efffba4c9afa960b8b182cd1

  • SHA1

    fe8000d29c7104f89ae78c857d4b7f9711b4f40c

  • SHA256

    9bb225940c0789de800546f76067ed6ea0582fca756143e3402dcb5cb1d17a0f

  • SHA512

    9e7bbd9b5f4f7b6f86d14a004d25b9cd542c75c7abd8babaffac852f1cce6fe0041214340931feaf2c507c964ccf78c40cf2800697bcdfb5e3af31788892be5d

  • SSDEEP

    98304:Q2gBwkDXtPdWrbO4izWGOBox7W1EkDXtPdWrbO4izWXOBox7W1N:Q2gakWrbRiFOXKkWrbRiQOX/

Score
8/10
persistence

Malware Config

Targets

    • Target

      9bb225940c0789de800546f76067ed6ea0582fca756143e3402dcb5cb1d17a0f

    • Size

      7.2MB

    • MD5

      03897d36efffba4c9afa960b8b182cd1

    • SHA1

      fe8000d29c7104f89ae78c857d4b7f9711b4f40c

    • SHA256

      9bb225940c0789de800546f76067ed6ea0582fca756143e3402dcb5cb1d17a0f

    • SHA512

      9e7bbd9b5f4f7b6f86d14a004d25b9cd542c75c7abd8babaffac852f1cce6fe0041214340931feaf2c507c964ccf78c40cf2800697bcdfb5e3af31788892be5d

    • SSDEEP

      98304:Q2gBwkDXtPdWrbO4izWGOBox7W1EkDXtPdWrbO4izWXOBox7W1N:Q2gakWrbRiFOXKkWrbRiQOX/

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks