Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    211da615bc1c5bda63e8ed3caecaf68b

  • Size

    501KB

  • Sample

    231225-qjhwsahahl

  • MD5

    211da615bc1c5bda63e8ed3caecaf68b

  • SHA1

    818ee48249335fc10b8b6fc42fca35bb66e9a95a

  • SHA256

    0a8b4703517118f05483c8d7f3416130f1e8cb5e512fd4a756c2fb4ada2cd43f

  • SHA512

    39cf4441d480647eb23f0744a86b5e2af62850da9d44ac096613ce1a085a7ed720b6903a4c909a7bb1f8277e4c5274e30ddff894eb3595cbeafa0a1cac71aabd

  • SSDEEP

    12288:vRjPijdsbNjk1gl0cDdvC1wG1/fKyXzaVY0A5:vVmd4jBxvI1/fKyXzr0

Score
7/10
upx

Malware Config

Targets

    • Target

      211da615bc1c5bda63e8ed3caecaf68b

    • Size

      501KB

    • MD5

      211da615bc1c5bda63e8ed3caecaf68b

    • SHA1

      818ee48249335fc10b8b6fc42fca35bb66e9a95a

    • SHA256

      0a8b4703517118f05483c8d7f3416130f1e8cb5e512fd4a756c2fb4ada2cd43f

    • SHA512

      39cf4441d480647eb23f0744a86b5e2af62850da9d44ac096613ce1a085a7ed720b6903a4c909a7bb1f8277e4c5274e30ddff894eb3595cbeafa0a1cac71aabd

    • SSDEEP

      12288:vRjPijdsbNjk1gl0cDdvC1wG1/fKyXzaVY0A5:vVmd4jBxvI1/fKyXzr0

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks