Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    47cf17920bc6518eecedda58ddf615a4

  • Size

    366KB

  • Sample

    231226-bfl2pshgg7

  • MD5

    47cf17920bc6518eecedda58ddf615a4

  • SHA1

    9eac90ccff9752f4d16fc8f602abbb44c0b8e588

  • SHA256

    3a8608d16004e8b8b7f90692cc291c3ee0ffd7bee5b2e72ba67c9a5f6cee8d36

  • SHA512

    7f2a8df43cf1da08239d33bd4498a90fc34f8a7366060ca7293ce2eddacc08762df935e37219ce8d8282e011066c5ca30570532a79d217523d4f5a0e84454f2c

  • SSDEEP

    6144:ix26zYzbGQl4zCO5md1CDSB1yDzlLWEqgwn2y1JOcvS5c5ikc+icshwgD5hqG:ix26zYzbGQl4zJM1yDzJ4gwN1sc65LcU

Score
7/10

Malware Config

Targets

    • Target

      INTERV~1.EXE

    • Size

      393KB

    • MD5

      865bfe30edc6e6802536b5a0954a92e7

    • SHA1

      c302402e8c5a4fd65218884cbd653953a2367d27

    • SHA256

      7f5386e1ae6b9ff3b0557ab4c29231e53839e9be3701a5e803ab666ea3eea46a

    • SHA512

      97ed8970864f3d96ea7e19610c41496e354faaebd4e766f21412baad068cf19f09c9a32b00be51e12ed66b09156df8b173524952fcd5b9c095779dadfd91f490

    • SSDEEP

      6144:njbeiPYYzbsQl4zCO5me1CDSf1yDzaLWEZgwn2y1bbcvS5KMiGc+icm:nuSYYzbsQl4zJr1yDzc/gwN1nc65qc

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Target

      file.exe

    • Size

      14KB

    • MD5

      1703a99e8291f3c0fa0731e7978e9492

    • SHA1

      af55895c57421de7b1c990790d7356d39b3531b0

    • SHA256

      48099fe656d16023a8f895e2e1176670749e0c99b8096ad806b3057f3cada440

    • SHA512

      b75fde745ca35f8380f8250cac0f4a8ab508179a0424b147c6a1146172ad46a8ada1c30e2def5947ca2ffec0695895fe810e6f62c91fd9b06d3b5b582ae9dbab

    • SSDEEP

      384:DUdkH9FOjujpBueWUKy/620+cb0zhXDDBinl7uJg+A:DUKdFOjQpBPWbfgk+XD9K7

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks