Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

61e2c0eb8b...fb.exe

windows7-x64

7

61e2c0eb8b...fb.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61e2c0eb8b87b2cff74eeb9d9ad3c8a91e792b3618d9bd57f96232b70337b7fb.zip

  • Size

    234KB

  • Sample

    231119-15syzscb56

  • MD5

    83dbae5e6533420f7a4b9adaa497bd13

  • SHA1

    5bb2d62d9df473d90b75bd019777ac256345173e

  • SHA256

    ba51d740cc8735db9973b9ec6843c1d0c4f7a52882542a47c55694fa2981eb9d

  • SHA512

    74ddcdb3636e6484666d1895bd380dfdc0c7a833e99d3fa22756213dabecd3ac23a60709db3b718b07842f9ab7f3a9c0129a7b5c67354c78c803bda66093b7a0

  • SSDEEP

    6144:rSt7IRGujdxIAsukuZGnxje63QWkB4zWZ:rStWXnIALEnA69K4aZ

Score
7/10

Malware Config

Targets

    • Target

      61e2c0eb8b87b2cff74eeb9d9ad3c8a91e792b3618d9bd57f96232b70337b7fb.exe

    • Size

      387KB

    • MD5

      5d22fa34c376cb47f21dcbb36c806446

    • SHA1

      d4fc0c29163d9798ec5dc9481a5e93f3e5462683

    • SHA256

      61e2c0eb8b87b2cff74eeb9d9ad3c8a91e792b3618d9bd57f96232b70337b7fb

    • SHA512

      5734965ae44fe7c82f8b8ff538ffd5a43fd5384a1de45571d9a20774ff0be1a5ee72f0cc784ae2278fa0ce623bdd6bc25ff77635f5c8ed36eedf0bcfc602f69f

    • SSDEEP

      6144:5nALTWwzPIj4JwTW+wPBlOeLEe3whJVH:2TWwzPWCwLwPBNLRwH

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks