Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

db2d0b2265...a5.exe

windows7-x64

10

db2d0b2265...a5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db2d0b226578f134051f6eb05f6413215823492c8bea6f089c1efb281ecd23a5

  • Size

    248KB

  • Sample

    221205-3tmc6shd68

  • MD5

    7ce76d506a9ce67a304fc407505434ce

  • SHA1

    5b1f3545ee9bf9bb0a04819af9c973c989bb0a24

  • SHA256

    db2d0b226578f134051f6eb05f6413215823492c8bea6f089c1efb281ecd23a5

  • SHA512

    c74be949736b1a8fc80d55772474cc5744264abe7186d6ea96e9e75845a8e81d147d5fa99c8cd91a60f2fb6b6b6133c95d955cbb611afdd4cbea2f3676072ba0

  • SSDEEP

    3072:5frBXUxghqYaGUe1AK8b/EQk28wlowMmbz1gNNdeHd1fdVcjsQyO1obdmeBnZZk:tVt71U/EQk28wlowbIGysQs5me1Zi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      db2d0b226578f134051f6eb05f6413215823492c8bea6f089c1efb281ecd23a5

    • Size

      248KB

    • MD5

      7ce76d506a9ce67a304fc407505434ce

    • SHA1

      5b1f3545ee9bf9bb0a04819af9c973c989bb0a24

    • SHA256

      db2d0b226578f134051f6eb05f6413215823492c8bea6f089c1efb281ecd23a5

    • SHA512

      c74be949736b1a8fc80d55772474cc5744264abe7186d6ea96e9e75845a8e81d147d5fa99c8cd91a60f2fb6b6b6133c95d955cbb611afdd4cbea2f3676072ba0

    • SSDEEP

      3072:5frBXUxghqYaGUe1AK8b/EQk28wlowMmbz1gNNdeHd1fdVcjsQyO1obdmeBnZZk:tVt71U/EQk28wlowbIGysQs5me1Zi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks