Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    17eb8ead8fa8253a5b2131f2f07f2e1edc09a50197cc4b58a5818a1e16b73113

  • Size

    935KB

  • Sample

    221125-s8l1vahc48

  • MD5

    219e1e4e7d7959974177b6fe3b976a71

  • SHA1

    b5365494e51cf19dffb9a8ce4eea2950789c51a2

  • SHA256

    17eb8ead8fa8253a5b2131f2f07f2e1edc09a50197cc4b58a5818a1e16b73113

  • SHA512

    97941f6061d4e2ffc46ef7cfa9c0623960cad7a95b643eb5f21e30ffc495846158c1c22cdaea911a597882c7ed1bd6ff56984e444e7688376494c7a041894c19

  • SSDEEP

    12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4j:pyHv5Z+Wzv7AiBll0OBWi6si9GK

Score
8/10
upx

Malware Config

Targets

    • Target

      17eb8ead8fa8253a5b2131f2f07f2e1edc09a50197cc4b58a5818a1e16b73113

    • Size

      935KB

    • MD5

      219e1e4e7d7959974177b6fe3b976a71

    • SHA1

      b5365494e51cf19dffb9a8ce4eea2950789c51a2

    • SHA256

      17eb8ead8fa8253a5b2131f2f07f2e1edc09a50197cc4b58a5818a1e16b73113

    • SHA512

      97941f6061d4e2ffc46ef7cfa9c0623960cad7a95b643eb5f21e30ffc495846158c1c22cdaea911a597882c7ed1bd6ff56984e444e7688376494c7a041894c19

    • SSDEEP

      12288:p5Yr15f753d5QWIDz/Wz9NCyzHinLipNDJ5eoFb0OZ/WiGaks+HL63S27x4j:pyHv5Z+Wzv7AiBll0OBWi6si9GK

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks