Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

22/12/2023, 09:04

231222-k1vc9agbf3 3

22/12/2023, 09:02

231222-kzksesebdq 3

22/12/2023, 08:57

231222-kwmgvaeaen 7

General

  • Target

    Easy_all_Mod_v1.03.90.exe

  • Size

    15.3MB

  • Sample

    231222-kwmgvaeaen

  • MD5

    9af43cc8850ba75fa2af9cb49203ebc4

  • SHA1

    ab09da74dce93def479103712031d15649f745bb

  • SHA256

    e32936e2b80a08a594498283941e82ea2d34dff6aba017e848f12b053c9bb55b

  • SHA512

    55a5911a0bf510fc14f87ce34d4fe46766149c22dbda86a69fbc50dbb870b2b72158226a3a2c6516025ab5ab4496c53a41c32555802721dcfc9688549e5287fe

  • SSDEEP

    393216:Mch3nJO8oLOPhWbTlZ3S1bWKOqM26YUXFdCb9w:zh3s8yuhElZWidWgS

Score
7/10

Malware Config

Targets

    • Target

      Easy_all_Mod_v1.03.90.exe

    • Size

      15.3MB

    • MD5

      9af43cc8850ba75fa2af9cb49203ebc4

    • SHA1

      ab09da74dce93def479103712031d15649f745bb

    • SHA256

      e32936e2b80a08a594498283941e82ea2d34dff6aba017e848f12b053c9bb55b

    • SHA512

      55a5911a0bf510fc14f87ce34d4fe46766149c22dbda86a69fbc50dbb870b2b72158226a3a2c6516025ab5ab4496c53a41c32555802721dcfc9688549e5287fe

    • SSDEEP

      393216:Mch3nJO8oLOPhWbTlZ3S1bWKOqM26YUXFdCb9w:zh3s8yuhElZWidWgS

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks