Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    85e442a84cb974exeexeexeex.exe

  • Size

    139KB

  • Sample

    230708-vn6wmagg9y

  • MD5

    85e442a84cb9746320000b75c39f2413

  • SHA1

    76bc129fc40ee1a7df3f01bfa200933752af8032

  • SHA256

    73a1acd0095d5d737783b637e3bd2e6ae74849d21ba5536456cf7c9a44e21d56

  • SHA512

    c8e771cd3aefe722e9440845a6bf81758cbe54dfb8b5508b39058fe38932868e05dbe852bd2d0f2f392c12e44ddd233a3860c94cbd686473f40a0d526b323ee0

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp699GjZT:z6a+CdOOtEvwDpjczw

Score
7/10
upx

Malware Config

Targets

    • Target

      85e442a84cb974exeexeexeex.exe

    • Size

      139KB

    • MD5

      85e442a84cb9746320000b75c39f2413

    • SHA1

      76bc129fc40ee1a7df3f01bfa200933752af8032

    • SHA256

      73a1acd0095d5d737783b637e3bd2e6ae74849d21ba5536456cf7c9a44e21d56

    • SHA512

      c8e771cd3aefe722e9440845a6bf81758cbe54dfb8b5508b39058fe38932868e05dbe852bd2d0f2f392c12e44ddd233a3860c94cbd686473f40a0d526b323ee0

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp699GjZT:z6a+CdOOtEvwDpjczw

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks