Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

dfd8bb785c...e1.exe

windows7-x64

10

dfd8bb785c...e1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfd8bb785c53a7b2d3cddf680dbb1388d6089450a65ca8e9b7f5f5168ec028e1

  • Size

    98KB

  • Sample

    221201-t88qaacb2v

  • MD5

    25b3f992c2ab8e8b12e8684dcd00e5e0

  • SHA1

    c05df6faa70f9311f5ff39ed3f117cbba4c1e9e3

  • SHA256

    dfd8bb785c53a7b2d3cddf680dbb1388d6089450a65ca8e9b7f5f5168ec028e1

  • SHA512

    6adf828c448297d68e0842ad74f36674ab0d2fa1dd5a2a1d35cfc7a9078868e71d1f250be220abc88f7c73675b9218f8e4b845ed5bc42942ba6dc69213243897

  • SSDEEP

    1536:MMMamqCubWRVoIHQ9SMxevLrs9zq/+gMYq0rkIdHx9mB8HxWZozbY6BJymq7vUq:IQbWwIHEgv0QpMTIlXWZozbYPmeqV

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      dfd8bb785c53a7b2d3cddf680dbb1388d6089450a65ca8e9b7f5f5168ec028e1

    • Size

      98KB

    • MD5

      25b3f992c2ab8e8b12e8684dcd00e5e0

    • SHA1

      c05df6faa70f9311f5ff39ed3f117cbba4c1e9e3

    • SHA256

      dfd8bb785c53a7b2d3cddf680dbb1388d6089450a65ca8e9b7f5f5168ec028e1

    • SHA512

      6adf828c448297d68e0842ad74f36674ab0d2fa1dd5a2a1d35cfc7a9078868e71d1f250be220abc88f7c73675b9218f8e4b845ed5bc42942ba6dc69213243897

    • SSDEEP

      1536:MMMamqCubWRVoIHQ9SMxevLrs9zq/+gMYq0rkIdHx9mB8HxWZozbY6BJymq7vUq:IQbWwIHEgv0QpMTIlXWZozbYPmeqV

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks