Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2cb3b15d80...36.exe

windows7-x64

10

2cb3b15d80...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cb3b15d80b24820461e96eb0e1eb136

  • Size

    180KB

  • Sample

    240410-gkyh7aef32

  • MD5

    2cb3b15d80b24820461e96eb0e1eb136

  • SHA1

    c83a6bda6b18170f8a57a87d8878d6e912e32751

  • SHA256

    f5dc2c5f28f2ee04bcc8be8db65b50d56890c8a0145a3a4319215d51bba2350a

  • SHA512

    11b87bdf8a72de068247e57bb9aa227e3d3b9fe8461058bc8cfbd82efa2dacb7f89418b4dd2aed1fefac7e75454c317fb1cd5a9d6cf592ef8daad013a9dc77c7

  • SSDEEP

    3072:PFKSaAr21MlttMFz8o+F334VSlkfoyHYb/zCHPEhg5JN8x+eDfcAuQPUS9rulDB:PFi1MltKaJkHHYb/zCHPEhg5JN8x+eDK

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2cb3b15d80b24820461e96eb0e1eb136

    • Size

      180KB

    • MD5

      2cb3b15d80b24820461e96eb0e1eb136

    • SHA1

      c83a6bda6b18170f8a57a87d8878d6e912e32751

    • SHA256

      f5dc2c5f28f2ee04bcc8be8db65b50d56890c8a0145a3a4319215d51bba2350a

    • SHA512

      11b87bdf8a72de068247e57bb9aa227e3d3b9fe8461058bc8cfbd82efa2dacb7f89418b4dd2aed1fefac7e75454c317fb1cd5a9d6cf592ef8daad013a9dc77c7

    • SSDEEP

      3072:PFKSaAr21MlttMFz8o+F334VSlkfoyHYb/zCHPEhg5JN8x+eDfcAuQPUS9rulDB:PFi1MltKaJkHHYb/zCHPEhg5JN8x+eDK

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks