Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b0d3b0298b...1N.exe

windows7-x64

10

b0d3b0298b...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0d3b0298bf8abd3c6fcbddb2aed4c9d722f8151543825fa71c69dce992de831N

  • Size

    224KB

  • Sample

    241011-3xlaaa1dpb

  • MD5

    234cf0bb76b4a717f7ec8a2cd0b53450

  • SHA1

    6492d3f87dd0b1564a1a16d6a647a053228b831a

  • SHA256

    b0d3b0298bf8abd3c6fcbddb2aed4c9d722f8151543825fa71c69dce992de831

  • SHA512

    f44872418d84651ad3a11a927c2b0a59b053955e8ea70f84e098a024015b946fe5c80c0245c657ae7a60f0c35be578c31ce42c16cecb56d04c516d52c6ed9712

  • SSDEEP

    3072:cfEFCI/HND//OfyT/v+r5nP398DFqIrOsyY6FyJU9KVpT:cWSyTX+r6FlrOsKc+9Kz

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      b0d3b0298bf8abd3c6fcbddb2aed4c9d722f8151543825fa71c69dce992de831N

    • Size

      224KB

    • MD5

      234cf0bb76b4a717f7ec8a2cd0b53450

    • SHA1

      6492d3f87dd0b1564a1a16d6a647a053228b831a

    • SHA256

      b0d3b0298bf8abd3c6fcbddb2aed4c9d722f8151543825fa71c69dce992de831

    • SHA512

      f44872418d84651ad3a11a927c2b0a59b053955e8ea70f84e098a024015b946fe5c80c0245c657ae7a60f0c35be578c31ce42c16cecb56d04c516d52c6ed9712

    • SSDEEP

      3072:cfEFCI/HND//OfyT/v+r5nP398DFqIrOsyY6FyJU9KVpT:cWSyTX+r6FlrOsKc+9Kz

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks