Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

3bc137f0fc...f4.exe

windows7-x64

8

3bc137f0fc...f4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bc137f0fcc20884118ddb93e00c68c773dbcc95726fb22d29d93fd17fc774f4

  • Size

    48KB

  • Sample

    221123-y9r65sfd2w

  • MD5

    52a7c2d7ccd1b933219dee6b494ff266

  • SHA1

    993f529d4ed736de3105776f6bb2a0a33da7cc6e

  • SHA256

    3bc137f0fcc20884118ddb93e00c68c773dbcc95726fb22d29d93fd17fc774f4

  • SHA512

    ba2c31e41dfa7566fb7060f9e776d9426916613cbc25c8a3fede34a8228d2aea6af6f20cd8280ec5aa1add046124f9c00853ea1295a88bec421da5ca63c567b8

  • SSDEEP

    768:x5btb1L0km+3k+IGFEIKK+dR7Lw5tKV47c1ruO3nG+5Yx3:LV1L0krdH2svolns

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      3bc137f0fcc20884118ddb93e00c68c773dbcc95726fb22d29d93fd17fc774f4

    • Size

      48KB

    • MD5

      52a7c2d7ccd1b933219dee6b494ff266

    • SHA1

      993f529d4ed736de3105776f6bb2a0a33da7cc6e

    • SHA256

      3bc137f0fcc20884118ddb93e00c68c773dbcc95726fb22d29d93fd17fc774f4

    • SHA512

      ba2c31e41dfa7566fb7060f9e776d9426916613cbc25c8a3fede34a8228d2aea6af6f20cd8280ec5aa1add046124f9c00853ea1295a88bec421da5ca63c567b8

    • SSDEEP

      768:x5btb1L0km+3k+IGFEIKK+dR7Lw5tKV47c1ruO3nG+5Yx3:LV1L0krdH2svolns

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks