Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

00595b92c7...c9.exe

windows7-x64

7

00595b92c7...c9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00595b92c767712ef810c43f6f2c5fc9

  • Size

    26KB

  • Sample

    231229-w1rg5shefk

  • MD5

    00595b92c767712ef810c43f6f2c5fc9

  • SHA1

    2f04f3cc34ff538b9546d8a4f980c0512913e207

  • SHA256

    b937e5f7549b3e8636cb2e1cfd4fd3951cd659e1b402b9f11dc4f546a48be7ac

  • SHA512

    387fbd2714bb45d87d1e355d44ad236b8f6c3551b66e31c53e98b432bf06971272a0016d1167fe94dc121191fa78a61f719cb897514d9e0d334656c80fa9d1a7

  • SSDEEP

    384:9Vv7z9MWRO6xsTBuqi3nRuaiY/qSgOZH/Cv7XWdVXEywHRH9nXXK+FJtR:9lHWweo9RLTiLOZH/gXWd2fxH9nK+Ft

Score
7/10
upx

Malware Config

Targets

    • Target

      00595b92c767712ef810c43f6f2c5fc9

    • Size

      26KB

    • MD5

      00595b92c767712ef810c43f6f2c5fc9

    • SHA1

      2f04f3cc34ff538b9546d8a4f980c0512913e207

    • SHA256

      b937e5f7549b3e8636cb2e1cfd4fd3951cd659e1b402b9f11dc4f546a48be7ac

    • SHA512

      387fbd2714bb45d87d1e355d44ad236b8f6c3551b66e31c53e98b432bf06971272a0016d1167fe94dc121191fa78a61f719cb897514d9e0d334656c80fa9d1a7

    • SSDEEP

      384:9Vv7z9MWRO6xsTBuqi3nRuaiY/qSgOZH/Cv7XWdVXEywHRH9nXXK+FJtR:9lHWweo9RLTiLOZH/gXWd2fxH9nK+Ft

    Score
    7/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks