Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

bc2653e5b2...c8.exe

windows7-x64

8

bc2653e5b2...c8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc2653e5b275da0588766bb0ea029ec8

  • Size

    57KB

  • Sample

    240309-st945aba32

  • MD5

    bc2653e5b275da0588766bb0ea029ec8

  • SHA1

    488343e1c5b81b749f015c2259a0958de5ea1ecb

  • SHA256

    25650154d06812b5467a30bc3eb19ef8e2872f6006f384f0dd5777ea4a5ce1b9

  • SHA512

    cf1f9fac92acdf35536a041d6d6a1ffa6f00092349040c5303444540b9ec975f1e3a63d3dd72d714f4e6799080b9c7cf504d8727c9cfe492e607ddfeb3af9ed1

  • SSDEEP

    768:/kRmosl06cA28DqSV8WnR1EQgz5pDZLhRWLhuHIf4qBkptr6W8U1ZJXhw13B:sRmex8mSVpRIDZdZD7ptr/ZNxw1x

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      bc2653e5b275da0588766bb0ea029ec8

    • Size

      57KB

    • MD5

      bc2653e5b275da0588766bb0ea029ec8

    • SHA1

      488343e1c5b81b749f015c2259a0958de5ea1ecb

    • SHA256

      25650154d06812b5467a30bc3eb19ef8e2872f6006f384f0dd5777ea4a5ce1b9

    • SHA512

      cf1f9fac92acdf35536a041d6d6a1ffa6f00092349040c5303444540b9ec975f1e3a63d3dd72d714f4e6799080b9c7cf504d8727c9cfe492e607ddfeb3af9ed1

    • SSDEEP

      768:/kRmosl06cA28DqSV8WnR1EQgz5pDZLhRWLhuHIf4qBkptr6W8U1ZJXhw13B:sRmex8mSVpRIDZdZD7ptr/ZNxw1x

    Score
    8/10
    evasionpersistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks