Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    CB.exe

  • Size

    5.2MB

  • Sample

    230425-f7s2jsgf55

  • MD5

    637700ea7452057be2367263a4cb43fd

  • SHA1

    3ccc4d326211394aef8982ad13bcb5d118633ab8

  • SHA256

    b9baef87ad23fba1d879d314be52bde59796c8a722a6a92735773a38e7d0dedd

  • SHA512

    a5a03a76739c468c1010c2f45c1e11af85d9958ef6d5d2e5b6e25962ff893969d99d2bea5b084c02d11aed768adc850abbd58c1039a3ea6a30a478b13ce98faa

  • SSDEEP

    98304:RYTvBcy/28tGbdAabkwouH4eJScfTpj8go4u7jJIWMsNJo/e:ScyO8WdAu5ouYeJtqgLiJIhs/o

Score
7/10

Malware Config

Targets

    • Target

      CB.exe

    • Size

      5.2MB

    • MD5

      637700ea7452057be2367263a4cb43fd

    • SHA1

      3ccc4d326211394aef8982ad13bcb5d118633ab8

    • SHA256

      b9baef87ad23fba1d879d314be52bde59796c8a722a6a92735773a38e7d0dedd

    • SHA512

      a5a03a76739c468c1010c2f45c1e11af85d9958ef6d5d2e5b6e25962ff893969d99d2bea5b084c02d11aed768adc850abbd58c1039a3ea6a30a478b13ce98faa

    • SSDEEP

      98304:RYTvBcy/28tGbdAabkwouH4eJScfTpj8go4u7jJIWMsNJo/e:ScyO8WdAu5ouYeJtqgLiJIhs/o

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v6

Tasks