Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b72b5d5a9b946c660fa47f97defb0f28306d06c80a2dde6b1fad1c8e46daa01d

  • Size

    894KB

  • Sample

    221019-txkjbaffe9

  • MD5

    a19907ab418d87e34fb6c9c4ebacc140

  • SHA1

    7aadbda62e90270ffd323f30026e69cbe755c967

  • SHA256

    b72b5d5a9b946c660fa47f97defb0f28306d06c80a2dde6b1fad1c8e46daa01d

  • SHA512

    6bb14ecc530d5198f6c55cfa7caf42e6ee204613c5cd22945daec76253c09f65136dea6327af902291b119de0d2d5337da0b7dc37a7ee028a1b3941b825b3f7d

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjF:r5sJo6YrFUiyAak11LtjF

Score
8/10

Malware Config

Targets

    • Target

      b72b5d5a9b946c660fa47f97defb0f28306d06c80a2dde6b1fad1c8e46daa01d

    • Size

      894KB

    • MD5

      a19907ab418d87e34fb6c9c4ebacc140

    • SHA1

      7aadbda62e90270ffd323f30026e69cbe755c967

    • SHA256

      b72b5d5a9b946c660fa47f97defb0f28306d06c80a2dde6b1fad1c8e46daa01d

    • SHA512

      6bb14ecc530d5198f6c55cfa7caf42e6ee204613c5cd22945daec76253c09f65136dea6327af902291b119de0d2d5337da0b7dc37a7ee028a1b3941b825b3f7d

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjF:r5sJo6YrFUiyAak11LtjF

    Score
    8/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks