Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

Dayload_V8.exe

windows7-x64

7

Dayload_V8.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dayload_V8.exe

  • Size

    1.7MB

  • Sample

    231029-xbg3vaaf63

  • MD5

    2e377d5dd89e8db32b18d7dbf1797b09

  • SHA1

    b30a259fa9fdbdd6fcd6cb21b6d52c7c25e4a978

  • SHA256

    a0d005522770b6dae72fc3f8e80a958d7d209b35c9504c1dfd4c749396bc41bb

  • SHA512

    71d06a530f72c5f6c3fd5af5f12edd8af478c05343581a6cfbec63e32cb4ad2a583639313fdb2fa324385bb0de5dbe0c2bc7f6ee0c6b8f5e14f5621ed5058fa7

  • SSDEEP

    49152:p/jwLjLXC45bdXzX3jTDYjg+ZMF+HYmTYF:pjwXHNjTAgNQY+YF

Score
7/10
upx

Malware Config

Targets

    • Target

      Dayload_V8.exe

    • Size

      1.7MB

    • MD5

      2e377d5dd89e8db32b18d7dbf1797b09

    • SHA1

      b30a259fa9fdbdd6fcd6cb21b6d52c7c25e4a978

    • SHA256

      a0d005522770b6dae72fc3f8e80a958d7d209b35c9504c1dfd4c749396bc41bb

    • SHA512

      71d06a530f72c5f6c3fd5af5f12edd8af478c05343581a6cfbec63e32cb4ad2a583639313fdb2fa324385bb0de5dbe0c2bc7f6ee0c6b8f5e14f5621ed5058fa7

    • SSDEEP

      49152:p/jwLjLXC45bdXzX3jTDYjg+ZMF+HYmTYF:pjwXHNjTAgNQY+YF

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks