Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

804a92fdec...ec.exe

windows7-x64

8

804a92fdec...ec.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    804a92fdec201da1406bcfc8ded035ec

  • Size

    743KB

  • Sample

    231222-k5tmhsedar

  • MD5

    804a92fdec201da1406bcfc8ded035ec

  • SHA1

    778c9cf7240c8d2c7e9b3f15f40acb979b41e23a

  • SHA256

    056715895b944a1c85e1aa3a72a5004987d1f2d760557497a8874b6d5706d4d2

  • SHA512

    81eecbcb4cf709d725a3ebf8f93f407c758d5fabdedbb1332a16644667045451dac2c2267b164b34b9658ccf6a85bdd11fbdced1c3d53f33b40ff7aa0fb4c4ec

  • SSDEEP

    6144:t515m515m515m5m5m515m5m5m5m515m515m5gLNmQfmriZ5UUvs5UdeTC2tmku/k:dLhmTC2tmku/iCikka/+MMB6P9+oT

Score
8/10
upx

Malware Config

Targets

    • Target

      804a92fdec201da1406bcfc8ded035ec

    • Size

      743KB

    • MD5

      804a92fdec201da1406bcfc8ded035ec

    • SHA1

      778c9cf7240c8d2c7e9b3f15f40acb979b41e23a

    • SHA256

      056715895b944a1c85e1aa3a72a5004987d1f2d760557497a8874b6d5706d4d2

    • SHA512

      81eecbcb4cf709d725a3ebf8f93f407c758d5fabdedbb1332a16644667045451dac2c2267b164b34b9658ccf6a85bdd11fbdced1c3d53f33b40ff7aa0fb4c4ec

    • SSDEEP

      6144:t515m515m515m5m5m515m5m5m5m515m515m5gLNmQfmriZ5UUvs5UdeTC2tmku/k:dLhmTC2tmku/iCikka/+MMB6P9+oT

    Score
    8/10
    upx

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks