Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

ba54531fde...08.exe

windows7-x64

8

ba54531fde...08.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba54531fde470207f2fe239c7c340d0529f46eff8c184b25736b3c4f13f72208

  • Size

    713KB

  • Sample

    221002-pm43raehe3

  • MD5

    65bf8f83dffef62d1579503822c3b790

  • SHA1

    df810334f2dd62277e8c431c88fb31f8c57319c2

  • SHA256

    ba54531fde470207f2fe239c7c340d0529f46eff8c184b25736b3c4f13f72208

  • SHA512

    af7638c01a4f8acb79b5604d0062b8fd3239a77236fc7c5d824ddce0b1a644abb3c93276e6c0550f48083207648229c993aeb75e58fa8d7998679b4cb45b76a1

  • SSDEEP

    12288:Vs+ApVpEYSOPuBOawRa9rBDUGNmX65+SxNPFQbGlHYy/mqEcFlp/j4QWSgBFl:itE30yrBIhKHPFQC+mEspLDW9

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      ba54531fde470207f2fe239c7c340d0529f46eff8c184b25736b3c4f13f72208

    • Size

      713KB

    • MD5

      65bf8f83dffef62d1579503822c3b790

    • SHA1

      df810334f2dd62277e8c431c88fb31f8c57319c2

    • SHA256

      ba54531fde470207f2fe239c7c340d0529f46eff8c184b25736b3c4f13f72208

    • SHA512

      af7638c01a4f8acb79b5604d0062b8fd3239a77236fc7c5d824ddce0b1a644abb3c93276e6c0550f48083207648229c993aeb75e58fa8d7998679b4cb45b76a1

    • SSDEEP

      12288:Vs+ApVpEYSOPuBOawRa9rBDUGNmX65+SxNPFQbGlHYy/mqEcFlp/j4QWSgBFl:itE30yrBIhKHPFQC+mEspLDW9

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks