Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

f0c44b35a3...c5.exe

windows7-x64

8

f0c44b35a3...c5.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0c44b35a38cc014aae4ab622cad7c23bab541160053770188fe7067905462c5

  • Size

    654KB

  • Sample

    221206-zksl2seg6t

  • MD5

    d1d7aadd8bf387753bd6c7501d943696

  • SHA1

    7f8c251e26eeb2a932fbac229bfd471e053e4189

  • SHA256

    f0c44b35a38cc014aae4ab622cad7c23bab541160053770188fe7067905462c5

  • SHA512

    7f62d94f93de037c6abc36a7b971914409c1796a20dd20c67f43f7d6117f523f7a267a6e20120cb5faff94fc81a1b36c8381a8ccf1dc0a1f5b4208df42cd6430

  • SSDEEP

    12288:h6Wq4aaE6KwyF5L0Y2D1PqLwelzrCW8Vwj/8Snw5CmzgpNrX:3thEVaPqLwex8e/dwEmsX

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      f0c44b35a38cc014aae4ab622cad7c23bab541160053770188fe7067905462c5

    • Size

      654KB

    • MD5

      d1d7aadd8bf387753bd6c7501d943696

    • SHA1

      7f8c251e26eeb2a932fbac229bfd471e053e4189

    • SHA256

      f0c44b35a38cc014aae4ab622cad7c23bab541160053770188fe7067905462c5

    • SHA512

      7f62d94f93de037c6abc36a7b971914409c1796a20dd20c67f43f7d6117f523f7a267a6e20120cb5faff94fc81a1b36c8381a8ccf1dc0a1f5b4208df42cd6430

    • SSDEEP

      12288:h6Wq4aaE6KwyF5L0Y2D1PqLwelzrCW8Vwj/8Snw5CmzgpNrX:3thEVaPqLwex8e/dwEmsX

    Score
    8/10
    persistenceupxevasion

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks