Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1c2213bf1d...30.exe

windows7-x64

8

1c2213bf1d...30.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c2213bf1db2bf4b835c90d7fc672548aeebbf6aab2cd29c064142273798f030

  • Size

    935KB

  • Sample

    221125-s1pf1abg8z

  • MD5

    e4d9006dea2df794e1dfce4c1047fd7b

  • SHA1

    a994011209b6e342e01964198d4b7d61a40b26a8

  • SHA256

    1c2213bf1db2bf4b835c90d7fc672548aeebbf6aab2cd29c064142273798f030

  • SHA512

    f54830a8565837f79dd83d6ccfb35996c2c3526870fdfa9581d8545b281bbfaaadc1255e14bec6d339c38b0d126a235aea0b1b3fec804b2a6a9a213d2abdcc81

  • SSDEEP

    12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x44:pyHv5Z+Wzv7AiBll0OBWi6si9Gd

Score
8/10
upx

Malware Config

Targets

    • Target

      1c2213bf1db2bf4b835c90d7fc672548aeebbf6aab2cd29c064142273798f030

    • Size

      935KB

    • MD5

      e4d9006dea2df794e1dfce4c1047fd7b

    • SHA1

      a994011209b6e342e01964198d4b7d61a40b26a8

    • SHA256

      1c2213bf1db2bf4b835c90d7fc672548aeebbf6aab2cd29c064142273798f030

    • SHA512

      f54830a8565837f79dd83d6ccfb35996c2c3526870fdfa9581d8545b281bbfaaadc1255e14bec6d339c38b0d126a235aea0b1b3fec804b2a6a9a213d2abdcc81

    • SSDEEP

      12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x44:pyHv5Z+Wzv7AiBll0OBWi6si9Gd

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks