Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a1c4f47574f17c_JC.exe

  • Size

    79KB

  • Sample

    230717-wpvenaeb54

  • MD5

    a1c4f47574f17cccb1f996051000b8eb

  • SHA1

    3ddebe6844565c047042ba2e5123226e68046d7a

  • SHA256

    a5b12b05743152d34f9c008386e93b2496d3537f8c1c4aaca403ee09cf08c526

  • SHA512

    35479a2eecff366215dacbc30012c989a4467f637bde31cb3b72af5c29725c28f65648d220fae3f7bba02d06535820d44769b96d236875d6d06d4cbfe992f56f

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalDSnUb:1nK6a+qdOOtEvwDpjQ

Score
7/10
upx

Malware Config

Targets

    • Target

      a1c4f47574f17c_JC.exe

    • Size

      79KB

    • MD5

      a1c4f47574f17cccb1f996051000b8eb

    • SHA1

      3ddebe6844565c047042ba2e5123226e68046d7a

    • SHA256

      a5b12b05743152d34f9c008386e93b2496d3537f8c1c4aaca403ee09cf08c526

    • SHA512

      35479a2eecff366215dacbc30012c989a4467f637bde31cb3b72af5c29725c28f65648d220fae3f7bba02d06535820d44769b96d236875d6d06d4cbfe992f56f

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalDSnUb:1nK6a+qdOOtEvwDpjQ

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks