Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

b45bca68ac...66.exe

windows7-x64

10

b45bca68ac...66.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b45bca68ac2de7f9df32dd5744a762686ccb8afdc92612764541f68d0b5b8366

  • Size

    196KB

  • Sample

    221207-c3t69sge54

  • MD5

    215417e6ebce886d89cb9a30378f2153

  • SHA1

    a1952d92e132af423fe9dbb7ce20e72fc3341ac0

  • SHA256

    b45bca68ac2de7f9df32dd5744a762686ccb8afdc92612764541f68d0b5b8366

  • SHA512

    6972ee35480c2cb3b0e0f122bb00cf856e884b771257823b2c2470879ed7d49c81a5e2b859875d66d3f09bd4168b644c5915eb6975d35304713ecb1b32cfada0

  • SSDEEP

    3072:W2dVnPybzV8Q3io0ce4LTI208YioBK9QRO8qgXQi:W2VnPybzV8Oio0ctLTt08doLRO8qggi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b45bca68ac2de7f9df32dd5744a762686ccb8afdc92612764541f68d0b5b8366

    • Size

      196KB

    • MD5

      215417e6ebce886d89cb9a30378f2153

    • SHA1

      a1952d92e132af423fe9dbb7ce20e72fc3341ac0

    • SHA256

      b45bca68ac2de7f9df32dd5744a762686ccb8afdc92612764541f68d0b5b8366

    • SHA512

      6972ee35480c2cb3b0e0f122bb00cf856e884b771257823b2c2470879ed7d49c81a5e2b859875d66d3f09bd4168b644c5915eb6975d35304713ecb1b32cfada0

    • SSDEEP

      3072:W2dVnPybzV8Q3io0ce4LTI208YioBK9QRO8qgXQi:W2VnPybzV8Oio0ctLTt08doLRO8qggi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks