Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

b8fd9913d6...8e.exe

windows7-x64

10

b8fd9913d6...8e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8fd9913d659855d7290e9595a164c2d78a5e1f7273990c6fd3a48bc8cf6078e

  • Size

    132KB

  • Sample

    221206-ppvxvshb34

  • MD5

    e15429cadcff8352d6559600d124c67a

  • SHA1

    16ed1c5d8cf700a9b2edefba119fa262e24cc39e

  • SHA256

    b8fd9913d659855d7290e9595a164c2d78a5e1f7273990c6fd3a48bc8cf6078e

  • SHA512

    e9a4954e65e3724174f628bcf1ffe94441f1784506709e4a263d75fc394d3fb589e66d736173d97fcedac77efcd73026d64326065fd4eb0e8be2a21a235cada5

  • SSDEEP

    1536:57wVFjb0kWUBtizWywMsK8q72QNSqxAASKrSitUrN4oQ/hKeXsjEFTp+H7:5gLBtiJ772QNPPSK24oQZiEH+H7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b8fd9913d659855d7290e9595a164c2d78a5e1f7273990c6fd3a48bc8cf6078e

    • Size

      132KB

    • MD5

      e15429cadcff8352d6559600d124c67a

    • SHA1

      16ed1c5d8cf700a9b2edefba119fa262e24cc39e

    • SHA256

      b8fd9913d659855d7290e9595a164c2d78a5e1f7273990c6fd3a48bc8cf6078e

    • SHA512

      e9a4954e65e3724174f628bcf1ffe94441f1784506709e4a263d75fc394d3fb589e66d736173d97fcedac77efcd73026d64326065fd4eb0e8be2a21a235cada5

    • SSDEEP

      1536:57wVFjb0kWUBtizWywMsK8q72QNSqxAASKrSitUrN4oQ/hKeXsjEFTp+H7:5gLBtiJ772QNPPSK24oQZiEH+H7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks