Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

abb9cc0586...98.exe

windows7-x64

10

abb9cc0586...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abb9cc05863a9a471b365643773198df2dd34623296c3447a655274b0fba0698

  • Size

    34KB

  • Sample

    221206-3wk8wsab21

  • MD5

    16733b4c328622b2dbc4b062214cdd22

  • SHA1

    c1ebbb333f7b8c36615f12c05d9522e3ac7ab64f

  • SHA256

    abb9cc05863a9a471b365643773198df2dd34623296c3447a655274b0fba0698

  • SHA512

    d3b8fc0598e1214bbe39816b8f0caa0406e7b813d3da19d11fa08f2bbcdb6cd6bc4e0f428fad70fc2859304bd8a41d9c9d12f8dcbe4d7950d7fe50762f51776e

  • SSDEEP

    768:I+6RcpA0HJXVGQwxspJgwivSBEaoV4jZ34agYUtqZ:ILa3H2wim1oV0dJ+C

Score
10/10
evasiontrojanupx

Malware Config

Targets

    • Target

      abb9cc05863a9a471b365643773198df2dd34623296c3447a655274b0fba0698

    • Size

      34KB

    • MD5

      16733b4c328622b2dbc4b062214cdd22

    • SHA1

      c1ebbb333f7b8c36615f12c05d9522e3ac7ab64f

    • SHA256

      abb9cc05863a9a471b365643773198df2dd34623296c3447a655274b0fba0698

    • SHA512

      d3b8fc0598e1214bbe39816b8f0caa0406e7b813d3da19d11fa08f2bbcdb6cd6bc4e0f428fad70fc2859304bd8a41d9c9d12f8dcbe4d7950d7fe50762f51776e

    • SSDEEP

      768:I+6RcpA0HJXVGQwxspJgwivSBEaoV4jZ34agYUtqZ:ILa3H2wim1oV0dJ+C

    Score
    10/10
    evasiontrojanupx

    • Modifies firewall policy service

      evasion

    • UAC bypass

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks