Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5eae6f2bcee574exeexeexeex.exe

  • Size

    100KB

  • Sample

    230708-kl64haeb9w

  • MD5

    5eae6f2bcee5741312db23c08bfb18d8

  • SHA1

    c5152c7a0202c519b3d2cea56e13e790e23a9034

  • SHA256

    b68a79bfaed815e1a9d152c06b196bf9c4b1abeddfdc9b48f93a67c8f5571bee

  • SHA512

    26013a119623165599f842f2f6fd0a7434b6792361342fc2d438a0664f6aa818031fc51109768e9708800ba04481fec631fee8401c427dc951817bbf885668e6

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6Gz:1nK6a+qdOOtEvwDpjz

Score
7/10
upx

Malware Config

Targets

    • Target

      5eae6f2bcee574exeexeexeex.exe

    • Size

      100KB

    • MD5

      5eae6f2bcee5741312db23c08bfb18d8

    • SHA1

      c5152c7a0202c519b3d2cea56e13e790e23a9034

    • SHA256

      b68a79bfaed815e1a9d152c06b196bf9c4b1abeddfdc9b48f93a67c8f5571bee

    • SHA512

      26013a119623165599f842f2f6fd0a7434b6792361342fc2d438a0664f6aa818031fc51109768e9708800ba04481fec631fee8401c427dc951817bbf885668e6

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6Gz:1nK6a+qdOOtEvwDpjz

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks