Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

4c6384b33c...71.exe

windows7-x64

8

4c6384b33c...71.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c6384b33c02a8124545a6356d71c1d12e45d369e796d669da75238051c37c71

  • Size

    284KB

  • Sample

    221011-r1v34sadhm

  • MD5

    12134afc08cc6eec52ab045a27ccc557

  • SHA1

    84e3f1278c9c79d4312a4d10178e0d12da3dda98

  • SHA256

    4c6384b33c02a8124545a6356d71c1d12e45d369e796d669da75238051c37c71

  • SHA512

    7cea96310c64b634900e8f74d8575dee45f4fa3f69b0f0528876c1a6a62b8e071e0632d7455f6c3d088efbcbdc69bd041665d2bd2ee8bf947389e4dd0f83209b

  • SSDEEP

    3072:mSQ0EWVwZhKxC5Rt+k60Zh+qw6PYSsszfHZTZJ2lC:mPA6wxmuJspr2l

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      4c6384b33c02a8124545a6356d71c1d12e45d369e796d669da75238051c37c71

    • Size

      284KB

    • MD5

      12134afc08cc6eec52ab045a27ccc557

    • SHA1

      84e3f1278c9c79d4312a4d10178e0d12da3dda98

    • SHA256

      4c6384b33c02a8124545a6356d71c1d12e45d369e796d669da75238051c37c71

    • SHA512

      7cea96310c64b634900e8f74d8575dee45f4fa3f69b0f0528876c1a6a62b8e071e0632d7455f6c3d088efbcbdc69bd041665d2bd2ee8bf947389e4dd0f83209b

    • SSDEEP

      3072:mSQ0EWVwZhKxC5Rt+k60Zh+qw6PYSsszfHZTZJ2lC:mPA6wxmuJspr2l

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks