Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

7bff60bda9...55.exe

windows7-x64

8

7bff60bda9...55.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7bff60bda9a7ecba7edc46250921f3bcb3e4b57fbe1c08f0ef53e7d783bd9d55

  • Size

    33KB

  • Sample

    240808-2zfbdasalr

  • MD5

    c2972601a06328dc728312c4d81c966e

  • SHA1

    9c41aaeaa14fe4b68c97f2a04eeb9f29da87f195

  • SHA256

    7bff60bda9a7ecba7edc46250921f3bcb3e4b57fbe1c08f0ef53e7d783bd9d55

  • SHA512

    b370d192c5f9f4799764bb1ce3aaa4563479037f397c4d2a408841962f4476ec217b556b976fe938192cc6caaa6f0eef42d299d38aa0e3d5e7a5b6feb3e60468

  • SSDEEP

    384:Pqc8W5JenQ05X9pZGmvt72B6zS3Gf1qpwPI9vpuR27vvxlLbKKDltl9HrTo:wQ0npvVYYhf1auI9vpe27DbXtlBTo

Score
8/10
defense_evasiondiscoveryevasion

Malware Config

Targets

    • Target

      7bff60bda9a7ecba7edc46250921f3bcb3e4b57fbe1c08f0ef53e7d783bd9d55

    • Size

      33KB

    • MD5

      c2972601a06328dc728312c4d81c966e

    • SHA1

      9c41aaeaa14fe4b68c97f2a04eeb9f29da87f195

    • SHA256

      7bff60bda9a7ecba7edc46250921f3bcb3e4b57fbe1c08f0ef53e7d783bd9d55

    • SHA512

      b370d192c5f9f4799764bb1ce3aaa4563479037f397c4d2a408841962f4476ec217b556b976fe938192cc6caaa6f0eef42d299d38aa0e3d5e7a5b6feb3e60468

    • SSDEEP

      384:Pqc8W5JenQ05X9pZGmvt72B6zS3Gf1qpwPI9vpuR27vvxlLbKKDltl9HrTo:wQ0npvVYYhf1auI9vpe27DbXtlBTo

    Score
    8/10
    defense_evasiondiscoveryevasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks