Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    05078888c3e6ada4268a19ebb33fc9f3

  • Size

    22KB

  • Sample

    231229-1whrnahhck

  • MD5

    05078888c3e6ada4268a19ebb33fc9f3

  • SHA1

    d263edb030156e7393ce22397ec6d9b941d2381e

  • SHA256

    75e56e521849251048b4e6c6c6d01d2fc738ed34b5f13915c0c157a73fe028ca

  • SHA512

    42a39376ebe1cf2b6e2bbab9ec3b79e646d0fceea6f72813968b054742f5a3911c6cd663ada09d1590a0d3d56b438211433a05a74e7b90d474434d4de6cfa551

  • SSDEEP

    384:vuOioLGVKCRc3IPYZ1tc15lbzqOZ1MZ99kJlfC:mOb4P4O+OZqZki

Score
7/10
upx

Malware Config

Targets

    • Target

      05078888c3e6ada4268a19ebb33fc9f3

    • Size

      22KB

    • MD5

      05078888c3e6ada4268a19ebb33fc9f3

    • SHA1

      d263edb030156e7393ce22397ec6d9b941d2381e

    • SHA256

      75e56e521849251048b4e6c6c6d01d2fc738ed34b5f13915c0c157a73fe028ca

    • SHA512

      42a39376ebe1cf2b6e2bbab9ec3b79e646d0fceea6f72813968b054742f5a3911c6cd663ada09d1590a0d3d56b438211433a05a74e7b90d474434d4de6cfa551

    • SSDEEP

      384:vuOioLGVKCRc3IPYZ1tc15lbzqOZ1MZ99kJlfC:mOb4P4O+OZqZki

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks