Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

8

HEUR-Troja...32.exe

windows7-x64

9

HEUR-Troja...32.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HEUR-Trojan-Ransom.Win32.Generic-729bb69f7a4eea069797cb57c084eb01a6a44e0d43be1f90a69795283e1993ee

  • Size

    865KB

  • Sample

    221106-fq7hlsgagr

  • MD5

    e3ccc3a8b9b6118bb701704da8e3fe96

  • SHA1

    a6aed7e5441b9b5ca6a43ffc40ef8d4cafea3973

  • SHA256

    729bb69f7a4eea069797cb57c084eb01a6a44e0d43be1f90a69795283e1993ee

  • SHA512

    caad45b522181503e77caf98a174dedde4d39074b21c543fa87fa4c3c44032b69593916c140e41cf357afdf3100cbcaab6000ee0f47b9c0c4ccb711a06112b91

  • SSDEEP

    12288:buAI/fN1zoFxdf0XgxZ7Ln8Wg9qn3bh3AbRV2Ngcc9zjYPnFMlUHYKv:CASFgPM2L8WgAdS2NizjYfFMl

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      HEUR-Trojan-Ransom.Win32.Generic-729bb69f7a4eea069797cb57c084eb01a6a44e0d43be1f90a69795283e1993ee

    • Size

      865KB

    • MD5

      e3ccc3a8b9b6118bb701704da8e3fe96

    • SHA1

      a6aed7e5441b9b5ca6a43ffc40ef8d4cafea3973

    • SHA256

      729bb69f7a4eea069797cb57c084eb01a6a44e0d43be1f90a69795283e1993ee

    • SHA512

      caad45b522181503e77caf98a174dedde4d39074b21c543fa87fa4c3c44032b69593916c140e41cf357afdf3100cbcaab6000ee0f47b9c0c4ccb711a06112b91

    • SSDEEP

      12288:buAI/fN1zoFxdf0XgxZ7Ln8Wg9qn3bh3AbRV2Ngcc9zjYPnFMlUHYKv:CASFgPM2L8WgAdS2NizjYfFMl

    Score
    9/10
    evasionupx

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks