Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

1

d290b6901c...68.exe

windows7-x64

9

d290b6901c...68.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d290b6901cc6d8785826f432645cf2d175033558157abf4a1ceb2f3f0952a468

  • Size

    1.8MB

  • Sample

    221127-mp4tnaag77

  • MD5

    292031cd65baadc1a13266a7df89b1ec

  • SHA1

    fce9dfc52342f35defeb06bbe98162853f960b0f

  • SHA256

    d290b6901cc6d8785826f432645cf2d175033558157abf4a1ceb2f3f0952a468

  • SHA512

    8d6fc748c15a5f570165f9474c86eed65cedf88cf67be2c7e46a4b346373479e4ee910ae3605f5dc925bd97449c56298ee1b7add441855aa7cc47426085ca62a

  • SSDEEP

    49152:za4KYhgQk5BCiUwUsPcZO7KPgnoOkAu+d:zpGLDtUwU9F2kAu+d

Score
9/10
discoveryupx

Malware Config

Targets

    • Target

      d290b6901cc6d8785826f432645cf2d175033558157abf4a1ceb2f3f0952a468

    • Size

      1.8MB

    • MD5

      292031cd65baadc1a13266a7df89b1ec

    • SHA1

      fce9dfc52342f35defeb06bbe98162853f960b0f

    • SHA256

      d290b6901cc6d8785826f432645cf2d175033558157abf4a1ceb2f3f0952a468

    • SHA512

      8d6fc748c15a5f570165f9474c86eed65cedf88cf67be2c7e46a4b346373479e4ee910ae3605f5dc925bd97449c56298ee1b7add441855aa7cc47426085ca62a

    • SSDEEP

      49152:za4KYhgQk5BCiUwUsPcZO7KPgnoOkAu+d:zpGLDtUwU9F2kAu+d

    Score
    9/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks