Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

04db19df5f...f2.exe

windows7-x64

8

04db19df5f...f2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04db19df5fae1fbfb6e5f67009afb9411f44ca41c4cfc1d830f94ea9970bfef2

  • Size

    279KB

  • Sample

    221203-cvefvaff23

  • MD5

    bc9df4c9daeba8f0e22fd279dcedf279

  • SHA1

    985fbcb13f0cbc938d6340354ae643836e35511c

  • SHA256

    04db19df5fae1fbfb6e5f67009afb9411f44ca41c4cfc1d830f94ea9970bfef2

  • SHA512

    176592dfab69649da78ac70537ead27a0d5c59a1a46d1071fa405cfe99d10e7253000443381eef6b4599ce7021c1f2aa9c5162d9348076b28ca1c881f89b008c

  • SSDEEP

    6144:PXhaVAhAD4U5lbVe/bZdkvFpO+2wFHO+v/5XXglx:PxaVAh64U5lEF2vFpO+2wFHO+5XXmx

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      04db19df5fae1fbfb6e5f67009afb9411f44ca41c4cfc1d830f94ea9970bfef2

    • Size

      279KB

    • MD5

      bc9df4c9daeba8f0e22fd279dcedf279

    • SHA1

      985fbcb13f0cbc938d6340354ae643836e35511c

    • SHA256

      04db19df5fae1fbfb6e5f67009afb9411f44ca41c4cfc1d830f94ea9970bfef2

    • SHA512

      176592dfab69649da78ac70537ead27a0d5c59a1a46d1071fa405cfe99d10e7253000443381eef6b4599ce7021c1f2aa9c5162d9348076b28ca1c881f89b008c

    • SSDEEP

      6144:PXhaVAhAD4U5lbVe/bZdkvFpO+2wFHO+v/5XXglx:PxaVAh64U5lEF2vFpO+2wFHO+5XXmx

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks