Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    08887594d6ebb35e86253dfa3d997ad3

  • Size

    856KB

  • Sample

    231225-gbhrdagbej

  • MD5

    08887594d6ebb35e86253dfa3d997ad3

  • SHA1

    42f5234c7186f5b0d5730e0acf39a93828ea31dd

  • SHA256

    08b1bf5eafe88ab23a8464040ab8ccc74636df964376860866e1c7edb3ea1425

  • SHA512

    9a0298568d3fa09f80070075900b042d1519f4267b3f958835bb8db39e1ccfe933a8fa120dc23827a93bcf02f22317af4f21bd2ae8f687c74c34fcf41c8ab309

  • SSDEEP

    24576:Yutr5OUKy7t2GbHYzdKWua1wRAUS+7b8viA:YuXrNbHYzQWRwRAUSaIb

Score
7/10
upx

Malware Config

Targets

    • Target

      08887594d6ebb35e86253dfa3d997ad3

    • Size

      856KB

    • MD5

      08887594d6ebb35e86253dfa3d997ad3

    • SHA1

      42f5234c7186f5b0d5730e0acf39a93828ea31dd

    • SHA256

      08b1bf5eafe88ab23a8464040ab8ccc74636df964376860866e1c7edb3ea1425

    • SHA512

      9a0298568d3fa09f80070075900b042d1519f4267b3f958835bb8db39e1ccfe933a8fa120dc23827a93bcf02f22317af4f21bd2ae8f687c74c34fcf41c8ab309

    • SSDEEP

      24576:Yutr5OUKy7t2GbHYzdKWua1wRAUS+7b8viA:YuXrNbHYzQWRwRAUSaIb

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks