Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

27d6e6cd3f...a7.exe

windows7_x64

10

27d6e6cd3f...a7.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27d6e6cd3ff5d26a814eb1439919a61d6725856065401c51e477e62f9fcf6fa7

  • Size

    482KB

  • Sample

    220502-cqqy3sefhl

  • MD5

    4bdb473e70c6c7e688e15049f103cd5d

  • SHA1

    d64100709ae9cb4968dd5d6e5d526b6c10b87678

  • SHA256

    27d6e6cd3ff5d26a814eb1439919a61d6725856065401c51e477e62f9fcf6fa7

  • SHA512

    d774898c41c70096cf601edf2b3fbe92181119f490909ac9b17eb3fc08d5131b6c9d29d4451bb78e232893a23789c2a5923f8a7c23eaf030a7297b448831caa2

Score
10/10
chinese_generic_botnetbotnetvmprotect

Malware Config

Targets

    • Target

      27d6e6cd3ff5d26a814eb1439919a61d6725856065401c51e477e62f9fcf6fa7

    • Size

      482KB

    • MD5

      4bdb473e70c6c7e688e15049f103cd5d

    • SHA1

      d64100709ae9cb4968dd5d6e5d526b6c10b87678

    • SHA256

      27d6e6cd3ff5d26a814eb1439919a61d6725856065401c51e477e62f9fcf6fa7

    • SHA512

      d774898c41c70096cf601edf2b3fbe92181119f490909ac9b17eb3fc08d5131b6c9d29d4451bb78e232893a23789c2a5923f8a7c23eaf030a7297b448831caa2

    Score
    10/10
    chinese_generic_botnetbotnetvmprotect

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet Payload

      botnet

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks