Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6c23d186a8...20.exe

windows7-x64

9

6c23d186a8...20.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c23d186a8ad288a8d3bedb26ac3351d4dd8350b84acbaa163afd30d561dc220.exe

  • Size

    1.9MB

  • Sample

    240521-bprzbadh7t

  • MD5

    1e4ab972a4f5977387011437c4dbe618

  • SHA1

    a7c033be7d29c03c4d617d6268637341a827f12b

  • SHA256

    6c23d186a8ad288a8d3bedb26ac3351d4dd8350b84acbaa163afd30d561dc220

  • SHA512

    bb4e5c26bc68007b343974e9e6687c3b51613b191b4a6f58a9ceec8ffb4ed2fca2e6172b3f601ec5bd94a540846c12348811ab6eefdf046973209b54abbcdecc

  • SSDEEP

    24576:GkXbZMzUN+ZysTspK8kCBHcdjW1kMrLbgBwnRTvOksAhyTDc/VkTJSML2crAM0aI:jskL1LrLb52kmTD6oJSsrAMgduf8hMs

Score
10/10

Malware Config

Targets

    • Target

      6c23d186a8ad288a8d3bedb26ac3351d4dd8350b84acbaa163afd30d561dc220.exe

    • Size

      1.9MB

    • MD5

      1e4ab972a4f5977387011437c4dbe618

    • SHA1

      a7c033be7d29c03c4d617d6268637341a827f12b

    • SHA256

      6c23d186a8ad288a8d3bedb26ac3351d4dd8350b84acbaa163afd30d561dc220

    • SHA512

      bb4e5c26bc68007b343974e9e6687c3b51613b191b4a6f58a9ceec8ffb4ed2fca2e6172b3f601ec5bd94a540846c12348811ab6eefdf046973209b54abbcdecc

    • SSDEEP

      24576:GkXbZMzUN+ZysTspK8kCBHcdjW1kMrLbgBwnRTvOksAhyTDc/VkTJSML2crAM0aI:jskL1LrLb52kmTD6oJSsrAMgduf8hMs

    Score
    9/10

    • Detects executables packed with unregistered version of .NET Reactor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks