Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3575486a60a4f1e583c91b73a01ce80061bed71fe29cf49d8f9f89cd5da2dd33

  • Size

    935KB

  • Sample

    221125-rve5pshb3y

  • MD5

    26412fb6e4b5e7991a03972e826f0ff0

  • SHA1

    3415a05c9a43e239c243d5ac22870feb6dd54492

  • SHA256

    3575486a60a4f1e583c91b73a01ce80061bed71fe29cf49d8f9f89cd5da2dd33

  • SHA512

    5cf6ec5cdb23f6406b9fd38d58d51f0eb9ba4128a78ca47a3c19e9a591a4a81dbaa599482b99660b6094392d311453f2341dc8125d8dbf52969ba77599595617

  • SSDEEP

    12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4y:IyHv5Z+Wzv7AiBll0OBWi6si9GT

Score
8/10
upx

Malware Config

Targets

    • Target

      3575486a60a4f1e583c91b73a01ce80061bed71fe29cf49d8f9f89cd5da2dd33

    • Size

      935KB

    • MD5

      26412fb6e4b5e7991a03972e826f0ff0

    • SHA1

      3415a05c9a43e239c243d5ac22870feb6dd54492

    • SHA256

      3575486a60a4f1e583c91b73a01ce80061bed71fe29cf49d8f9f89cd5da2dd33

    • SHA512

      5cf6ec5cdb23f6406b9fd38d58d51f0eb9ba4128a78ca47a3c19e9a591a4a81dbaa599482b99660b6094392d311453f2341dc8125d8dbf52969ba77599595617

    • SSDEEP

      12288:I5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4y:IyHv5Z+Wzv7AiBll0OBWi6si9GT

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks