Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a8cd804d0c56bfc6253b457f8db32ec2f2ff851a6813abc4c98f9f925af28e8f

  • Size

    935KB

  • Sample

    221125-ljnptabg5z

  • MD5

    d0a103ffdf66d9e9784eb08c8bd87b96

  • SHA1

    90da7f9a6537bc7d00c05eccecbb439ae9b01977

  • SHA256

    a8cd804d0c56bfc6253b457f8db32ec2f2ff851a6813abc4c98f9f925af28e8f

  • SHA512

    44887ec48d3215153e33d897e31b6bca502cfc81678661f17c0d78559bdd120d4a30c05fe0e70efee4c350e17c1a63dc1d011d5e9b9b2bf15752762b6456ef12

  • SSDEEP

    12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4D:oyHv5Z+Wzv7AiBll0OBWi6si9GW

Score
8/10
upx

Malware Config

Targets

    • Target

      a8cd804d0c56bfc6253b457f8db32ec2f2ff851a6813abc4c98f9f925af28e8f

    • Size

      935KB

    • MD5

      d0a103ffdf66d9e9784eb08c8bd87b96

    • SHA1

      90da7f9a6537bc7d00c05eccecbb439ae9b01977

    • SHA256

      a8cd804d0c56bfc6253b457f8db32ec2f2ff851a6813abc4c98f9f925af28e8f

    • SHA512

      44887ec48d3215153e33d897e31b6bca502cfc81678661f17c0d78559bdd120d4a30c05fe0e70efee4c350e17c1a63dc1d011d5e9b9b2bf15752762b6456ef12

    • SSDEEP

      12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4D:oyHv5Z+Wzv7AiBll0OBWi6si9GW

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks