Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0FF1C3 2021 - by Diekrolo.zip

  • Size

    14.7MB

  • Sample

    230322-r5myashd49

  • MD5

    9f4397d3d7c869fad960d3308a4f324a

  • SHA1

    3283dd1fb71f71929534d7d6d6d08401591405c4

  • SHA256

    1c924e5c3639fd9af8263c985dad9d7fb41b4eb23133563362cff92f3b410f07

  • SHA512

    12d4e691e2384dc8d21e4586cf9447ae2795b07c19eae2e6337767c712b7c88e835d67a607556c9b6f7ad78ade6489318617694eb10287688eae97ad1b104ad4

  • SSDEEP

    393216:tPzxCckMphxRQGrWQD6GRm9rJu+FZzdohV+jqtvKoJ:FzxCckMtRQ0xXRU9xoijqtKU

Score
7/10
upx

Malware Config

Targets

    • Target

      0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/OInstall.exe

    • Size

      10.9MB

    • MD5

      ebc58647462ad9c76395ef451064d115

    • SHA1

      14e470812f13b278b2694a4cec5737a39784e9dd

    • SHA256

      414155bf11893ec64ba0f4ffb7de92885090845a0761cf8f6743462aa5991d5e

    • SHA512

      8a9ef093d151957ae3c4c8e572fcdbd2198398c95ff8186d532853856c12c8f9ae7408c4f24518c5903faa517ea4e1d5779e797c5a4d850073fbee3ab801e8cc

    • SSDEEP

      196608:2ZnMGjZsDEsCaYsGEHy61bgUhufRswPU2/V8Gd83/PALDP0PiaQxhwf+9zYul28S:WnjZhsCOU6ZgfPPPuGdnv0fzfoDYtB

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/setup.exe

    • Size

      7.0MB

    • MD5

      072a2efea576956e465aff2492a1c7f4

    • SHA1

      c7ae89bf444a33d9d92584df62e16e518942b31d

    • SHA256

      ee3875abd5d49a1891c8818820f61a1e5d0382df37b5a5b72e175b2b6c70a9c2

    • SHA512

      5b4f4a4508d042c7554369729ca40cb16ed61f63a41996bf8689a17d0939fc95834a44e54833e50291b26df4d2f0d2877a6272039b3fc0b20dabc885eecc87eb

    • SSDEEP

      98304:4RimgRP8n5KSBHSFDd0t2M69XpiSLMmSCh+kB63QcJ11PaKLkhd2S6amwY2hk4:rmmGmDd0tMXHMmXh+kBuhJ1IDYS6amWT

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    • Target

      0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x64/cleanospp.exe

    • Size

      19KB

    • MD5

      162ab955cb2f002a73c1530aa796477f

    • SHA1

      d30a0e4e5911d3ca705617d17225372731c770e2

    • SHA256

      5ce462e5f34065fc878362ba58617fab28c22d631b9d836dddcf43fb1ad4de6e

    • SHA512

      e0288dcf78092449d9cbaef4488041131925387c1aedc9e9512da0f66efe2fb68350ca3937f6715834e62e7c931c5dad0fc8bc3c6c0c3daedeff356d6feaac2e

    • SSDEEP

      384:gQAInWKpEFFzpjq37oIOU6GHq33QPiu431VP:gxWTpOFagUb2qiu43P

    Score
    1/10
    • Target

      0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x64/msvcr100.dll

    • Size

      809KB

    • MD5

      df3ca8d16bded6a54977b30e66864d33

    • SHA1

      b7b9349b33230c5b80886f5c1f0a42848661c883

    • SHA256

      1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36

    • SHA512

      951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0

    • SSDEEP

      12288:3gzGPEett9Mw9HfBCddjMb2NQVmTW752fmyyKWeHQGokozS:QzJetPMw9HfBCrMb2Kc6ymyyKWewGzUS

    Score
    3/10
    • Target

      0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x86/cleanospp.exe

    • Size

      17KB

    • MD5

      5fd363d52d04ac200cd24f3bcc903200

    • SHA1

      39ed8659e7ca16aaccb86def94ce6cec4c847dd6

    • SHA256

      3fdefe2ad092a9a7fe0edf0ac4dc2de7e5b9ce6a0804f6511c06564194966cf9

    • SHA512

      f8ea73b0cb0a90fac6032a54028c60119022173334e68db3fbd63fe173032dd3fc3b438678064edb8c63d4eceaa72990ce039819df3d547d7d7627ad2eee36b3

    • SSDEEP

      192:Xdaz2FKIaphXuVX3uKny+gASTGWyQG0eJIL+uVl9tUDY5Kajjtl9w++zOzrPwaur:NbFuUOvAiG0gIVDKDYgmh02HPwzi3An

    Score
    1/10
    • Target

      0FF1C3 2021 - by Diekrolo/M1CR0S0F7 0FF1C3 2021 (LICENCIA PERPETUA) -S.M/files/x86/msvcr100.dll

    • Size

      755KB

    • MD5

      bf38660a9125935658cfa3e53fdc7d65

    • SHA1

      0b51fb415ec89848f339f8989d323bea722bfd70

    • SHA256

      60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa

    • SHA512

      25f521ffe25a950d0f1a4de63b04cb62e2a3b0e72e7405799586913208bf8f8fa52aa34e96a9cc6ee47afcd41870f3aa0cd8289c53461d1b6e792d19b750c9a1

    • SSDEEP

      12288:yMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BV0eAI:dmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV4I

    Score
    3/10

MITRE ATT&CK Enterprise v6

Tasks