Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a8c9d0e1d3fc4202c4d690e199335ac9649852c5756e9877bbc95e596f743cda

  • Size

    11.3MB

  • Sample

    231008-aq5q5aha2y

  • MD5

    91ada1603422df496fc4497eb212e0e6

  • SHA1

    ad4424daa647d61aa2cb0a3e6467a84c1ef03dde

  • SHA256

    a8c9d0e1d3fc4202c4d690e199335ac9649852c5756e9877bbc95e596f743cda

  • SHA512

    2d053491122cbb616e38adf4a79e6d70791130a8d056ea5bdc3493d1e635ccbfd7484c4482c7d00ce0cf769981e3174179529bbc4d956a1f0d9dcdf08405133e

  • SSDEEP

    196608:JbUspctu12q9EIHYNiVOdy2JLOfIK2A48UQbqtK+yrra/AZqQ1:Jb1Gu12ql4KY3FJAvUQGtK+yCT

Score
10/10
upx

Malware Config

Targets

    • Target

      a8c9d0e1d3fc4202c4d690e199335ac9649852c5756e9877bbc95e596f743cda

    • Size

      11.3MB

    • MD5

      91ada1603422df496fc4497eb212e0e6

    • SHA1

      ad4424daa647d61aa2cb0a3e6467a84c1ef03dde

    • SHA256

      a8c9d0e1d3fc4202c4d690e199335ac9649852c5756e9877bbc95e596f743cda

    • SHA512

      2d053491122cbb616e38adf4a79e6d70791130a8d056ea5bdc3493d1e635ccbfd7484c4482c7d00ce0cf769981e3174179529bbc4d956a1f0d9dcdf08405133e

    • SSDEEP

      196608:JbUspctu12q9EIHYNiVOdy2JLOfIK2A48UQbqtK+yrra/AZqQ1:Jb1Gu12ql4KY3FJAvUQGtK+yCT

    Score
    10/10
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Blocklisted process makes network request

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks