Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

14b7084d10...b7.exe

windows7-x64

10

14b7084d10...b7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14b7084d108ce0d2ce5c83e9696bae2a2a4ab24fb67c42b991d9a96a700478b7

  • Size

    340KB

  • Sample

    221205-mczn6sad24

  • MD5

    066c0dd206a70c628ac16b82f352fb14

  • SHA1

    b77b34a613fe507e7407556c98cbf3cb679b9c4f

  • SHA256

    14b7084d108ce0d2ce5c83e9696bae2a2a4ab24fb67c42b991d9a96a700478b7

  • SHA512

    2d00d015b295376fd592f4798ddd4d420101782ca4349eb8e93771ed6aa91a6f88acb232901410d4532d3f88ab21da7cb87b66b11e4c871af55bd84a127faf68

  • SSDEEP

    6144:7FmR9SLkWor+akVC5s/durgm7hv8htqiXkIvaX/m7bfTWaUspmHjYT9oFv6wHH/M:x89SLkWor+akVC5s/dIdEhtqiXkIvaXo

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      14b7084d108ce0d2ce5c83e9696bae2a2a4ab24fb67c42b991d9a96a700478b7

    • Size

      340KB

    • MD5

      066c0dd206a70c628ac16b82f352fb14

    • SHA1

      b77b34a613fe507e7407556c98cbf3cb679b9c4f

    • SHA256

      14b7084d108ce0d2ce5c83e9696bae2a2a4ab24fb67c42b991d9a96a700478b7

    • SHA512

      2d00d015b295376fd592f4798ddd4d420101782ca4349eb8e93771ed6aa91a6f88acb232901410d4532d3f88ab21da7cb87b66b11e4c871af55bd84a127faf68

    • SSDEEP

      6144:7FmR9SLkWor+akVC5s/durgm7hv8htqiXkIvaX/m7bfTWaUspmHjYT9oFv6wHH/M:x89SLkWor+akVC5s/dIdEhtqiXkIvaXo

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks