Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

新建文�...4f.msi

windows7-x64

7

新建文�...4f.msi

windows10-2004-x64

7

Resubmissions

30/06/2023, 08:09

230630-j2ll3agf35 7

30/06/2023, 08:03

230630-jxpg6age93 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    新建文件夹 (2).7z

  • Size

    4.9MB

  • Sample

    230630-j2ll3agf35

  • MD5

    5f94ed17f28c2c3f9fa91d953d17dd19

  • SHA1

    34eba3d4d6cfc2c9e4697f455791461f702b69d2

  • SHA256

    75fe871f78a0eea5ce5489c0815c230603aa45e2fc5f7bf67414a90888c63407

  • SHA512

    8b35c485c1c4b51b69e7bfeb8ca54ef0daefe98fe6ee21eb131fa1cadeeda6cf683ba17fe524097d0e5e99966b326927122e590cbe2da4ce38019a13f558a4db

  • SSDEEP

    98304:FSlz52/dwlcmRO2nAa0Qf+mxUQAg7PiY2DPrnZoOanzEQwNG2Nvk+TIf5g+:FOz52F1L2ftOBC7SzCO2zGJNvBsJ

Score
7/10
upxvmprotect

Malware Config

Targets

    • Target

      新建文件夹 (2)/f49acfb27630f8962eb2fe80da75b3e09f4b3d69c8d3c316687200a1c8aa1f4f.msi

    • Size

      2.4MB

    • MD5

      64039f083c96cab5ea0de62f789886ce

    • SHA1

      ffb89927ad892b7d6e3d6a88ec24a9d6a161dee2

    • SHA256

      f49acfb27630f8962eb2fe80da75b3e09f4b3d69c8d3c316687200a1c8aa1f4f

    • SHA512

      8eee7c46b8a031858acabe871616e92e95d2e3b4be5b8eae425bc412dc51470c578c6991ba2f3d290a1b96a556853454ea0bb69336e54b9b7aa28354af998fae

    • SSDEEP

      49152:3BiErnG0fwkAjwzYUrngrwjCBt4CFFDO84D2nng01WQhNzvS65R8ct:XnGvMzYUrhjCBZPO84DH01WQXzvP5xt

    Score
    7/10
    upxvmprotect

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks