Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

8

f439fd11ac...9f.exe

windows7-x64

9

f439fd11ac...9f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f439fd11acf857fafc866207ed1b0d1d15f4b87b10d9ba01d5faefc606a6cb9f

  • Size

    25KB

  • Sample

    221204-b7v4pafd87

  • MD5

    9cfe29c3f1a5a2f46870ec23c40f9540

  • SHA1

    2e74ee6afe5f25405f505fafa2af07c84ed4bec5

  • SHA256

    f439fd11acf857fafc866207ed1b0d1d15f4b87b10d9ba01d5faefc606a6cb9f

  • SHA512

    9f976527187909d77f1d0a692c0622e28c9452d59db7a4450cb95e529bb5f290bf9bb98a9fc93fc91a0884c912024f7a8d104ed4d216c859e31b7cb4ab42ac63

  • SSDEEP

    384:qjC8qYyWr2Fit+OU58G0qH/54H6KMLp2JsgHxZ/WqlTK43qu+Viy:z8blr2AThGd4H6Xp2RZ/PlT+Ay

Score
9/10
upx

Malware Config

Targets

    • Target

      f439fd11acf857fafc866207ed1b0d1d15f4b87b10d9ba01d5faefc606a6cb9f

    • Size

      25KB

    • MD5

      9cfe29c3f1a5a2f46870ec23c40f9540

    • SHA1

      2e74ee6afe5f25405f505fafa2af07c84ed4bec5

    • SHA256

      f439fd11acf857fafc866207ed1b0d1d15f4b87b10d9ba01d5faefc606a6cb9f

    • SHA512

      9f976527187909d77f1d0a692c0622e28c9452d59db7a4450cb95e529bb5f290bf9bb98a9fc93fc91a0884c912024f7a8d104ed4d216c859e31b7cb4ab42ac63

    • SSDEEP

      384:qjC8qYyWr2Fit+OU58G0qH/54H6KMLp2JsgHxZ/WqlTK43qu+Viy:z8blr2AThGd4H6Xp2RZ/PlT+Ay

    Score
    9/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks