Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    04c124d16ae427d67e2805c62c7c2b39

  • Size

    32KB

  • Sample

    231229-1lpr8agabn

  • MD5

    04c124d16ae427d67e2805c62c7c2b39

  • SHA1

    3389d1548f4508c087a0b9def501ff801332a97d

  • SHA256

    5767724a51f17b238a1430ce22810473ce1eb1cb2211a6f356c51ee143b3ec8f

  • SHA512

    954315427a4360cfb4dcb2c8baa5f48b1804a55c9d7e1f9ccf67537c73d2965dd35574c47ba787dfa74ad6a805ba07ca7a7e05e0102d34fac6a91dcbb4882338

  • SSDEEP

    384:GTe/OmxDM6AbQBw+8tWp3WrGQ6mXjDBRJwGaRLlvn:ae2mxDMBbQB97SGQrXj1POR

Score
8/10
upx

Malware Config

Targets

    • Target

      04c124d16ae427d67e2805c62c7c2b39

    • Size

      32KB

    • MD5

      04c124d16ae427d67e2805c62c7c2b39

    • SHA1

      3389d1548f4508c087a0b9def501ff801332a97d

    • SHA256

      5767724a51f17b238a1430ce22810473ce1eb1cb2211a6f356c51ee143b3ec8f

    • SHA512

      954315427a4360cfb4dcb2c8baa5f48b1804a55c9d7e1f9ccf67537c73d2965dd35574c47ba787dfa74ad6a805ba07ca7a7e05e0102d34fac6a91dcbb4882338

    • SSDEEP

      384:GTe/OmxDM6AbQBw+8tWp3WrGQ6mXjDBRJwGaRLlvn:ae2mxDMBbQB97SGQrXj1POR

    Score
    8/10
    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks