Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

e1a873d75a...df.exe

windows7-x64

8

e1a873d75a...df.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1a873d75a3d97d7d1570252eb9460dd7419dfa9eb9100807e083ebff02bf6df

  • Size

    8.5MB

  • Sample

    231011-h5zsesbe32

  • MD5

    4c046d8fcd68b308e6361c49579d3dd4

  • SHA1

    e595aa98843684e494a3edb9a58d86508f1d81a3

  • SHA256

    e1a873d75a3d97d7d1570252eb9460dd7419dfa9eb9100807e083ebff02bf6df

  • SHA512

    c4c60b60e387407c0626931b07c608f44fddd6411b9a578f9ba13b26321972db323e26b5c36846ab854ac75c892325f157aa073a8bf00514a2d937e36a5da504

  • SSDEEP

    196608:M7xiyjnEtXw/K7W0yVLrS4riDVmv7H0X7FEk:Ajn2g/KktrHWVmv7H0XREk

Score
8/10
upx

Malware Config

Targets

    • Target

      e1a873d75a3d97d7d1570252eb9460dd7419dfa9eb9100807e083ebff02bf6df

    • Size

      8.5MB

    • MD5

      4c046d8fcd68b308e6361c49579d3dd4

    • SHA1

      e595aa98843684e494a3edb9a58d86508f1d81a3

    • SHA256

      e1a873d75a3d97d7d1570252eb9460dd7419dfa9eb9100807e083ebff02bf6df

    • SHA512

      c4c60b60e387407c0626931b07c608f44fddd6411b9a578f9ba13b26321972db323e26b5c36846ab854ac75c892325f157aa073a8bf00514a2d937e36a5da504

    • SSDEEP

      196608:M7xiyjnEtXw/K7W0yVLrS4riDVmv7H0X7FEk:Ajn2g/KktrHWVmv7H0XREk

    Score
    8/10
    upx

    • Downloads MZ/PE file

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks