Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

76c558e35d...JC.exe

windows7-x64

10

76c558e35d...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76c558e35dabf3bb233dc75b8a57a160_JC.exe

  • Size

    56KB

  • Sample

    230918-wbl65abc5v

  • MD5

    76c558e35dabf3bb233dc75b8a57a160

  • SHA1

    cb5c20ac9a202f93908134d21bcb4c8e193b1743

  • SHA256

    189bd2124bf6745f8083c6f6820feef1044e0190a0415ff1c467f427b4d8593c

  • SHA512

    23fb8486053064d4c8d954fdaaf9249164c3dea558fe2bd37433f4a00589066370a77a1ee19c0ae631239d93d24f36797ca1df82d54981e6a6ad0df7684b61ff

  • SSDEEP

    768:xgMNEhm6g4/yZnquYIv+6wH9H7MfygXaDMFQXD7e7DQ:xgMamW/luj6NNDsQXD7i8

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      76c558e35dabf3bb233dc75b8a57a160_JC.exe

    • Size

      56KB

    • MD5

      76c558e35dabf3bb233dc75b8a57a160

    • SHA1

      cb5c20ac9a202f93908134d21bcb4c8e193b1743

    • SHA256

      189bd2124bf6745f8083c6f6820feef1044e0190a0415ff1c467f427b4d8593c

    • SHA512

      23fb8486053064d4c8d954fdaaf9249164c3dea558fe2bd37433f4a00589066370a77a1ee19c0ae631239d93d24f36797ca1df82d54981e6a6ad0df7684b61ff

    • SSDEEP

      768:xgMNEhm6g4/yZnquYIv+6wH9H7MfygXaDMFQXD7e7DQ:xgMamW/luj6NNDsQXD7i8

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks