Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

2fb7ae87a1...d7.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fb7ae87a1aa8bd8edb2cf7085bed0364dd2e5ff444f78eb78d4868c863bd8d7

  • Size

    2.5MB

  • Sample

    231030-qceksada7s

  • MD5

    0f71854c91161db35da00279afb2c599

  • SHA1

    ef3881ed1ba6fde333ad7b3c49073b8cdf34ea3f

  • SHA256

    2fb7ae87a1aa8bd8edb2cf7085bed0364dd2e5ff444f78eb78d4868c863bd8d7

  • SHA512

    850b7174f62ec2d16720ec3c5cdf24beeab4af31f76dd36855d667d393c88dc893f81ec4019653a3b033d5c3fe18da25359eb7afc23d47bdd31ca6cca8461de4

  • SSDEEP

    49152:yZ5KdWZVhwAWYFC3TXVAjHcuRXOsjz7rHvJ/VpYWWT:yQ+OtDXVGHh86P9bOT

Score
7/10

Malware Config

Targets

    • Target

      2fb7ae87a1aa8bd8edb2cf7085bed0364dd2e5ff444f78eb78d4868c863bd8d7

    • Size

      2.5MB

    • MD5

      0f71854c91161db35da00279afb2c599

    • SHA1

      ef3881ed1ba6fde333ad7b3c49073b8cdf34ea3f

    • SHA256

      2fb7ae87a1aa8bd8edb2cf7085bed0364dd2e5ff444f78eb78d4868c863bd8d7

    • SHA512

      850b7174f62ec2d16720ec3c5cdf24beeab4af31f76dd36855d667d393c88dc893f81ec4019653a3b033d5c3fe18da25359eb7afc23d47bdd31ca6cca8461de4

    • SSDEEP

      49152:yZ5KdWZVhwAWYFC3TXVAjHcuRXOsjz7rHvJ/VpYWWT:yQ+OtDXVGHh86P9bOT

    Score
    7/10

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks