Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

06eba72841...e8.exe

windows7-x64

10

06eba72841...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06eba72841ac172379cd2d2c137ec5e8

  • Size

    152KB

  • Sample

    231230-vf3h8saehk

  • MD5

    06eba72841ac172379cd2d2c137ec5e8

  • SHA1

    027de096f10c982d7db4f26dc20375623f1f61c3

  • SHA256

    61d97c95c3bdc62dc5f4bcc43306576b709b526b93b71958e53f9d8fa06824f4

  • SHA512

    f9078b519571cfc7690c5ebd07f59f1ee9b750c4f2b0c1faa92c7b9916dc19a6f16a1ac59c28f78d9b01b2405564153d21d62e8738f0e576ae5b9b8447cbf4c6

  • SSDEEP

    3072:V5EG3HCzwrCaHHvhtbz0wXtV2eZDEUXni7fo7KSif8xWM33r3k1jTCZU4oQZiEgv:sGXCzwrCW/0AHa8nuo7KSif8xWM33r3Q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      06eba72841ac172379cd2d2c137ec5e8

    • Size

      152KB

    • MD5

      06eba72841ac172379cd2d2c137ec5e8

    • SHA1

      027de096f10c982d7db4f26dc20375623f1f61c3

    • SHA256

      61d97c95c3bdc62dc5f4bcc43306576b709b526b93b71958e53f9d8fa06824f4

    • SHA512

      f9078b519571cfc7690c5ebd07f59f1ee9b750c4f2b0c1faa92c7b9916dc19a6f16a1ac59c28f78d9b01b2405564153d21d62e8738f0e576ae5b9b8447cbf4c6

    • SSDEEP

      3072:V5EG3HCzwrCaHHvhtbz0wXtV2eZDEUXni7fo7KSif8xWM33r3k1jTCZU4oQZiEgv:sGXCzwrCW/0AHa8nuo7KSif8xWM33r3Q

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks