Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    405d9b1ffab12d04a8305b48a2fa1ad59b0977b48e63b19806c19dff10fcf306

  • Size

    5.3MB

  • Sample

    221203-z57lpsfa89

  • MD5

    6c44edc89aabd8ef3f32bf53b80919ba

  • SHA1

    a476eb971501af4541fb6a97a049ab604f112c3b

  • SHA256

    405d9b1ffab12d04a8305b48a2fa1ad59b0977b48e63b19806c19dff10fcf306

  • SHA512

    209f1d3acffda8acaeee06462b2eb8cd5062e984e48b354f4650327a979048f3e83e06fa4391017133af8a62a644f3d1ab03cf6cc57a7b4d60cf8fe9c5ea36b6

  • SSDEEP

    24576:+DyTFtjjDyTFtjuDyTFtjjDyTFtjUDyTFtjjDyTFtj:rtwtvtwtZtwt

Score
8/10
upx

Malware Config

Targets

    • Target

      405d9b1ffab12d04a8305b48a2fa1ad59b0977b48e63b19806c19dff10fcf306

    • Size

      5.3MB

    • MD5

      6c44edc89aabd8ef3f32bf53b80919ba

    • SHA1

      a476eb971501af4541fb6a97a049ab604f112c3b

    • SHA256

      405d9b1ffab12d04a8305b48a2fa1ad59b0977b48e63b19806c19dff10fcf306

    • SHA512

      209f1d3acffda8acaeee06462b2eb8cd5062e984e48b354f4650327a979048f3e83e06fa4391017133af8a62a644f3d1ab03cf6cc57a7b4d60cf8fe9c5ea36b6

    • SSDEEP

      24576:+DyTFtjjDyTFtjuDyTFtjjDyTFtjUDyTFtjjDyTFtj:rtwtvtwtZtwt

    Score
    8/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks