Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Injector.exe

  • Size

    288KB

  • Sample

    230702-r7pjxabh44

  • MD5

    f2920ef418cf74b3603f9729b5ed0f30

  • SHA1

    ce803090d9acb75843c96be7264eea927623f0ea

  • SHA256

    28ca1fb4d6dc4e583f6170ce4b873a0b9d4eaa2af0d188503bd480d270d384ac

  • SHA512

    4556832f617dbf5e560a12e2061d30003e8f82b9bdb047004068f5676f64da677cb9fa108a0d4fa3cfcef727e2f58beba6e9790ca346ba2233d8ca501566e237

  • SSDEEP

    6144:vTIL8ouxrGLc9v5ei1f/VlCnU17py8IeGw+VOFIInwm9FB6:vTecmc2M/UU1FlU10FA

Score
7/10
upx

Malware Config

Targets

    • Target

      Injector.exe

    • Size

      288KB

    • MD5

      f2920ef418cf74b3603f9729b5ed0f30

    • SHA1

      ce803090d9acb75843c96be7264eea927623f0ea

    • SHA256

      28ca1fb4d6dc4e583f6170ce4b873a0b9d4eaa2af0d188503bd480d270d384ac

    • SHA512

      4556832f617dbf5e560a12e2061d30003e8f82b9bdb047004068f5676f64da677cb9fa108a0d4fa3cfcef727e2f58beba6e9790ca346ba2233d8ca501566e237

    • SSDEEP

      6144:vTIL8ouxrGLc9v5ei1f/VlCnU17py8IeGw+VOFIInwm9FB6:vTecmc2M/UU1FlU10FA

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks