Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8e13a61086...88.exe

windows7-x64

10

8e13a61086...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e13a6108622b66fca1518674d19629562220a02f5405a9ba081c77b5f407a88

  • Size

    519KB

  • Sample

    221202-znjtbage21

  • MD5

    5d25fac49860ba271904ab1bf7b3a3e9

  • SHA1

    8fae1aa5a01b39252b713a3364925d5430d6e56a

  • SHA256

    8e13a6108622b66fca1518674d19629562220a02f5405a9ba081c77b5f407a88

  • SHA512

    e71b73168d6d0a568c12c48c9e2cc56e267ce2dd3b3572393db02a56de582957ef34290501c4abda5bbf1acd3f59071ba885e747cd547bfaebc87ae4e4c9cb3d

  • SSDEEP

    12288:pHuy6uI17ZFaRfXR9TD2pLh7QH0wJ0X2ppGqvplz+cjvWBjYoS:tOR+XR9TD2pL1QH22pIqpl+o

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      8e13a6108622b66fca1518674d19629562220a02f5405a9ba081c77b5f407a88

    • Size

      519KB

    • MD5

      5d25fac49860ba271904ab1bf7b3a3e9

    • SHA1

      8fae1aa5a01b39252b713a3364925d5430d6e56a

    • SHA256

      8e13a6108622b66fca1518674d19629562220a02f5405a9ba081c77b5f407a88

    • SHA512

      e71b73168d6d0a568c12c48c9e2cc56e267ce2dd3b3572393db02a56de582957ef34290501c4abda5bbf1acd3f59071ba885e747cd547bfaebc87ae4e4c9cb3d

    • SSDEEP

      12288:pHuy6uI17ZFaRfXR9TD2pLh7QH0wJ0X2ppGqvplz+cjvWBjYoS:tOR+XR9TD2pL1QH22pIqpl+o

    Score
    10/10
    evasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks