Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1

  • Size

    160KB

  • Sample

    221011-x72gcsbdd2

  • MD5

    14a43c0702a81207bdbd22761aaea451

  • SHA1

    9da9b834dea2a7264594df45816c34e3398038a8

  • SHA256

    134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1

  • SHA512

    16131d4c2bea45f67ca385b220f33175a4ca6ff8a565cdda1c6b187cb97fc3dc827c4cdf2a1e186ba862c686413a7f4c326dd86a78d462fc0f20470256ea85d4

  • SSDEEP

    1536:F+gDbKlmyJKz5jR7766dxocisPfDsCUjhe+SPBp9oEoTTLgY++++1sY+++++ZDdM:FxbkuVbvLn7Uj3

Malware Config

Targets

    • Target

      134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1

    • Size

      160KB

    • MD5

      14a43c0702a81207bdbd22761aaea451

    • SHA1

      9da9b834dea2a7264594df45816c34e3398038a8

    • SHA256

      134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1

    • SHA512

      16131d4c2bea45f67ca385b220f33175a4ca6ff8a565cdda1c6b187cb97fc3dc827c4cdf2a1e186ba862c686413a7f4c326dd86a78d462fc0f20470256ea85d4

    • SSDEEP

      1536:F+gDbKlmyJKz5jR7766dxocisPfDsCUjhe+SPBp9oEoTTLgY++++1sY+++++ZDdM:FxbkuVbvLn7Uj3

    • Adds policy Run key to start application

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks