Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

7bd04633f8...a7.exe

windows7-x64

10

7bd04633f8...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7bd04633f8ccdaa8adf2c08ca5fb86a7

  • Size

    28KB

  • Sample

    240128-bzyvlsgee3

  • MD5

    7bd04633f8ccdaa8adf2c08ca5fb86a7

  • SHA1

    384a9c69f3ce0a87c45733dff8e5d6757af88a6c

  • SHA256

    f27089e764a7cc4fc490dbc02986b759fb77a085e665b359aa49697e72c6ab6e

  • SHA512

    6381bb439aeb5c49e9de041a03115f3a9a23f9bf437ac4631621412294e917b0b528dc41633ff38bc8a4f00ce9a0bc7c2f2df3fb24c1c407812ce8952e282cb1

  • SSDEEP

    768:MC9IUHWc3YdxPJB65qf+wgGfwp3U1fZHfEO7CDrm:MCSUHWc3YdZJB/gNpk1BfDH

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      7bd04633f8ccdaa8adf2c08ca5fb86a7

    • Size

      28KB

    • MD5

      7bd04633f8ccdaa8adf2c08ca5fb86a7

    • SHA1

      384a9c69f3ce0a87c45733dff8e5d6757af88a6c

    • SHA256

      f27089e764a7cc4fc490dbc02986b759fb77a085e665b359aa49697e72c6ab6e

    • SHA512

      6381bb439aeb5c49e9de041a03115f3a9a23f9bf437ac4631621412294e917b0b528dc41633ff38bc8a4f00ce9a0bc7c2f2df3fb24c1c407812ce8952e282cb1

    • SSDEEP

      768:MC9IUHWc3YdxPJB65qf+wgGfwp3U1fZHfEO7CDrm:MCSUHWc3YdZJB/gNpk1BfDH

    Score
    10/10
    evasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks