Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9966c425f3e6e9_JC.exe

  • Size

    89KB

  • Sample

    230717-vdn8tsec9s

  • MD5

    9966c425f3e6e91b3e3fbdfa1c3b9b6d

  • SHA1

    549de72cfad1268f26c73d6a66168d7984c8332d

  • SHA256

    fadf7b45bf53c5cd3f00d04b72378f08b3ae3626df2c7d15a8f9b4211b0fcb16

  • SHA512

    720aeb744cbbe641859f6b58c67b1b2f76334ffbc8eb120bab7bdcadcd269078d12ba788af61d3496c5ca12ded88c8853212294a2784703657d4c0ac7dc08bb9

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDj9i4G7:zCsanOtEvwDpjL

Score
7/10
upx

Malware Config

Targets

    • Target

      9966c425f3e6e9_JC.exe

    • Size

      89KB

    • MD5

      9966c425f3e6e91b3e3fbdfa1c3b9b6d

    • SHA1

      549de72cfad1268f26c73d6a66168d7984c8332d

    • SHA256

      fadf7b45bf53c5cd3f00d04b72378f08b3ae3626df2c7d15a8f9b4211b0fcb16

    • SHA512

      720aeb744cbbe641859f6b58c67b1b2f76334ffbc8eb120bab7bdcadcd269078d12ba788af61d3496c5ca12ded88c8853212294a2784703657d4c0ac7dc08bb9

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDj9i4G7:zCsanOtEvwDpjL

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks