Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    02d39bdf042aa00c8bbc6a6dc2549b71

  • Size

    963KB

  • Sample

    231225-dx4zyshgek

  • MD5

    02d39bdf042aa00c8bbc6a6dc2549b71

  • SHA1

    190576579181f53d5920b470a795f454acbdb823

  • SHA256

    4ffcef811b06685f47df5b5118ab7aded2d438064e76199373b22584921071c2

  • SHA512

    fae9b2ba344220a36106b6102cf21d90a9880aad6efed519ab01ab596220888baaaf493a8a2ea1263d82c95fddcb75aa6443b6cd46d05b9f177198a9e84b059b

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjrHANUTNZ0i:r5sJo6YrFUiyAak11Ltjx0i

Score
7/10

Malware Config

Targets

    • Target

      02d39bdf042aa00c8bbc6a6dc2549b71

    • Size

      963KB

    • MD5

      02d39bdf042aa00c8bbc6a6dc2549b71

    • SHA1

      190576579181f53d5920b470a795f454acbdb823

    • SHA256

      4ffcef811b06685f47df5b5118ab7aded2d438064e76199373b22584921071c2

    • SHA512

      fae9b2ba344220a36106b6102cf21d90a9880aad6efed519ab01ab596220888baaaf493a8a2ea1263d82c95fddcb75aa6443b6cd46d05b9f177198a9e84b059b

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjrHANUTNZ0i:r5sJo6YrFUiyAak11Ltjx0i

    Score
    7/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks