Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e3bb7878f1fa5dexe_JC.exe

  • Size

    100KB

  • Sample

    230719-pxe7daef85

  • MD5

    e3bb7878f1fa5d523cb3bf7236646973

  • SHA1

    f3a5fdb6a608822419b9d8f858c9ae81d7048911

  • SHA256

    be25a5e6560c285f795b753a8cbfd0b90c4d543068bb153dc77001bb792b0bc9

  • SHA512

    fef715b831bef4b37b967785919850e4a549143037519b49c346f065cb9849ce77eef65cca573b8ccb68dfb42274af132748fd0fd1374889c1c7b5726bfd10c1

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GCp:1nK6a+qdOOtEvwDpjI

Score
7/10
upx

Malware Config

Targets

    • Target

      e3bb7878f1fa5dexe_JC.exe

    • Size

      100KB

    • MD5

      e3bb7878f1fa5d523cb3bf7236646973

    • SHA1

      f3a5fdb6a608822419b9d8f858c9ae81d7048911

    • SHA256

      be25a5e6560c285f795b753a8cbfd0b90c4d543068bb153dc77001bb792b0bc9

    • SHA512

      fef715b831bef4b37b967785919850e4a549143037519b49c346f065cb9849ce77eef65cca573b8ccb68dfb42274af132748fd0fd1374889c1c7b5726bfd10c1

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GCp:1nK6a+qdOOtEvwDpjI

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks