Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5632300d01c005a64041596581558a3870444a4a09794ec4e0a3767368fc0501

  • Size

    935KB

  • Sample

    221125-qblbyaaa69

  • MD5

    0217423bb9cc331dfd71e96a41f3310f

  • SHA1

    7b80346cf58c9ca60c9926c10553a0987496b288

  • SHA256

    5632300d01c005a64041596581558a3870444a4a09794ec4e0a3767368fc0501

  • SHA512

    e6281345dce1ac19b82fa838932baefc8733e9639fc327db40d3e95baa72f7e16cbe2ba047d2b0b26b4cf8827ac3aef218f3b6cb6a13a80b024a8ceec5d3b57d

  • SSDEEP

    12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4T:IyHv5Z+Wzv7AiBll0OBWi6si9Gm

Score
8/10
upx

Malware Config

Targets

    • Target

      5632300d01c005a64041596581558a3870444a4a09794ec4e0a3767368fc0501

    • Size

      935KB

    • MD5

      0217423bb9cc331dfd71e96a41f3310f

    • SHA1

      7b80346cf58c9ca60c9926c10553a0987496b288

    • SHA256

      5632300d01c005a64041596581558a3870444a4a09794ec4e0a3767368fc0501

    • SHA512

      e6281345dce1ac19b82fa838932baefc8733e9639fc327db40d3e95baa72f7e16cbe2ba047d2b0b26b4cf8827ac3aef218f3b6cb6a13a80b024a8ceec5d3b57d

    • SSDEEP

      12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4T:IyHv5Z+Wzv7AiBll0OBWi6si9Gm

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks