Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3f06c46433...fb.exe

windows7-x64

8

3f06c46433...fb.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f06c46433e05dad73019dc691b4f4bc4ba2fdd26599fbc8c634cfbe2f62d6fb

  • Size

    935KB

  • Sample

    221125-re5enach33

  • MD5

    4f1262d191541001c9dde07b58bbd2f8

  • SHA1

    f1bf48f4042be3683d148cf88d70b312d5625084

  • SHA256

    3f06c46433e05dad73019dc691b4f4bc4ba2fdd26599fbc8c634cfbe2f62d6fb

  • SHA512

    510b57b8a722e8fb837612e64d619bad536f4d41489b0c3a47aa2c402402c046d592f77436153359320430aff75d4ca5cdc81359bdf5adeeecb691097b6325d1

  • SSDEEP

    12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4B:IyHv5Z+Wzv7AiBll0OBWi6si9Gk

Score
8/10
upx

Malware Config

Targets

    • Target

      3f06c46433e05dad73019dc691b4f4bc4ba2fdd26599fbc8c634cfbe2f62d6fb

    • Size

      935KB

    • MD5

      4f1262d191541001c9dde07b58bbd2f8

    • SHA1

      f1bf48f4042be3683d148cf88d70b312d5625084

    • SHA256

      3f06c46433e05dad73019dc691b4f4bc4ba2fdd26599fbc8c634cfbe2f62d6fb

    • SHA512

      510b57b8a722e8fb837612e64d619bad536f4d41489b0c3a47aa2c402402c046d592f77436153359320430aff75d4ca5cdc81359bdf5adeeecb691097b6325d1

    • SSDEEP

      12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4B:IyHv5Z+Wzv7AiBll0OBWi6si9Gk

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks