Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

4b362a137f...c4.exe

windows7-x64

8

4b362a137f...c4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b362a137f2a9759d152709b96db895cae84f0f96bfa747a374161d613e181c4

  • Size

    58KB

  • Sample

    221201-kpdw5afd4s

  • MD5

    1de64e1cf2bda73ede782673333d0e70

  • SHA1

    5854fff0080e6d800f4dfebd0612f0b14b923882

  • SHA256

    4b362a137f2a9759d152709b96db895cae84f0f96bfa747a374161d613e181c4

  • SHA512

    e66f07b9d2a16355f61b2e8992408b6f08c8156b135b07fd9dd5f8777f28dc577f1b2e60bdb0c7abb05d7760a53b9889f21fd581a8fbb7e480b3749ba8d4933a

  • SSDEEP

    768:+Hf+S26Iyfvcse5kzId8rH7R1fkGhg2QiGPL6QNcD3fTOZXKhB0q:yIyfvdzId8j7MGyPOZzTO6B0q

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      4b362a137f2a9759d152709b96db895cae84f0f96bfa747a374161d613e181c4

    • Size

      58KB

    • MD5

      1de64e1cf2bda73ede782673333d0e70

    • SHA1

      5854fff0080e6d800f4dfebd0612f0b14b923882

    • SHA256

      4b362a137f2a9759d152709b96db895cae84f0f96bfa747a374161d613e181c4

    • SHA512

      e66f07b9d2a16355f61b2e8992408b6f08c8156b135b07fd9dd5f8777f28dc577f1b2e60bdb0c7abb05d7760a53b9889f21fd581a8fbb7e480b3749ba8d4933a

    • SSDEEP

      768:+Hf+S26Iyfvcse5kzId8rH7R1fkGhg2QiGPL6QNcD3fTOZXKhB0q:yIyfvdzId8j7MGyPOZzTO6B0q

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks