Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

449c8e98e1...44.exe

windows7-x64

8

449c8e98e1...44.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    449c8e98e17cc17671bc9458a0a9424175b420bff34649d160858fadfeed0444

  • Size

    334KB

  • Sample

    221107-c99kjagadp

  • MD5

    07bc42f112176ee58bd69c2e299f18b7

  • SHA1

    9dc864c8f329dce1b46a4f7fbebc70f881bd723a

  • SHA256

    449c8e98e17cc17671bc9458a0a9424175b420bff34649d160858fadfeed0444

  • SHA512

    431848f761e178c39eb12f376f295d9167ce7ddf74cda60876a5a8c60e29f393779630fd2a211383bd6c1e6c96904b0578a75c9bf201afc812056bae22419dbc

  • SSDEEP

    6144:ZBIRqUi0xUmJCvJtS9RfydY1kRuiaMb3G1ZNl3E6JxLp9eV4AVE9:nIR5i0aSj9FD17vMQHZ9oV49

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      449c8e98e17cc17671bc9458a0a9424175b420bff34649d160858fadfeed0444

    • Size

      334KB

    • MD5

      07bc42f112176ee58bd69c2e299f18b7

    • SHA1

      9dc864c8f329dce1b46a4f7fbebc70f881bd723a

    • SHA256

      449c8e98e17cc17671bc9458a0a9424175b420bff34649d160858fadfeed0444

    • SHA512

      431848f761e178c39eb12f376f295d9167ce7ddf74cda60876a5a8c60e29f393779630fd2a211383bd6c1e6c96904b0578a75c9bf201afc812056bae22419dbc

    • SSDEEP

      6144:ZBIRqUi0xUmJCvJtS9RfydY1kRuiaMb3G1ZNl3E6JxLp9eV4AVE9:nIR5i0aSj9FD17vMQHZ9oV49

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks