Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6cb0345ca6f769f9881b1ccd1e622127ca9cac11b94b5a65837fdc5b018e57d9

  • Size

    935KB

  • Sample

    221125-pbmpbsfe84

  • MD5

    02a4c8499195f8b046512bbaf456865c

  • SHA1

    650f3ed03a734bb40c29bf174b252a3f73bc9439

  • SHA256

    6cb0345ca6f769f9881b1ccd1e622127ca9cac11b94b5a65837fdc5b018e57d9

  • SHA512

    938a80c75c5fcb953f85cb0670e2d1e30f0c89893db71e6e69199c6e6a047c068141f8de7712acd486026d891b4a5b48aff0c0195e7a2166eaa4be4eb4ef533b

  • SSDEEP

    12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4A:oyHv5Z+Wzv7AiBll0OBWi6si9GN

Score
8/10
upx

Malware Config

Targets

    • Target

      6cb0345ca6f769f9881b1ccd1e622127ca9cac11b94b5a65837fdc5b018e57d9

    • Size

      935KB

    • MD5

      02a4c8499195f8b046512bbaf456865c

    • SHA1

      650f3ed03a734bb40c29bf174b252a3f73bc9439

    • SHA256

      6cb0345ca6f769f9881b1ccd1e622127ca9cac11b94b5a65837fdc5b018e57d9

    • SHA512

      938a80c75c5fcb953f85cb0670e2d1e30f0c89893db71e6e69199c6e6a047c068141f8de7712acd486026d891b4a5b48aff0c0195e7a2166eaa4be4eb4ef533b

    • SSDEEP

      12288:o5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4A:oyHv5Z+Wzv7AiBll0OBWi6si9GN

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks