Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

95944ce8ad...3a.exe

windows7-x64

8

95944ce8ad...3a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95944ce8ad91884bbe7d107a260f58798bb98d65ab7974c4ef4546caad4c863a

  • Size

    935KB

  • Sample

    221125-mfqwfaad26

  • MD5

    3fb2663aa1853e3125ed1b935216ddf6

  • SHA1

    537c331ced6bb857ff976e1b63444d500a0d803c

  • SHA256

    95944ce8ad91884bbe7d107a260f58798bb98d65ab7974c4ef4546caad4c863a

  • SHA512

    c2804280648235b52a22cb5b049c4a374679cae25b5a6cd0d581c3d4d9c89c07d053f6b09d821ce59b0ba40e57e1275f8793b0b916fab0cfc4bcacfa24b0c99c

  • SSDEEP

    12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4x:IyHv5Z+Wzv7AiBll0OBWi6si9Gg

Score
8/10
upx

Malware Config

Targets

    • Target

      95944ce8ad91884bbe7d107a260f58798bb98d65ab7974c4ef4546caad4c863a

    • Size

      935KB

    • MD5

      3fb2663aa1853e3125ed1b935216ddf6

    • SHA1

      537c331ced6bb857ff976e1b63444d500a0d803c

    • SHA256

      95944ce8ad91884bbe7d107a260f58798bb98d65ab7974c4ef4546caad4c863a

    • SHA512

      c2804280648235b52a22cb5b049c4a374679cae25b5a6cd0d581c3d4d9c89c07d053f6b09d821ce59b0ba40e57e1275f8793b0b916fab0cfc4bcacfa24b0c99c

    • SSDEEP

      12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4x:IyHv5Z+Wzv7AiBll0OBWi6si9Gg

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks