Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

12bee5a0f4...5e.exe

windows7-x64

10

12bee5a0f4...5e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12bee5a0f409509a09d5042769cea45e

  • Size

    960KB

  • Sample

    231230-jspmcsgge2

  • MD5

    12bee5a0f409509a09d5042769cea45e

  • SHA1

    d49b0e3551f5602389294170768344a07ca7771b

  • SHA256

    e3b3f42cc2a24dd62ee89245d50dd815c87b033b45f402ec36e751b3b7b3288b

  • SHA512

    016391a9bb084857f770b23d088796e2cd08e27e52b162e0e7f7b479f0ecaa20ef72980848824d1ac6f6341a75c1628c8f2ac68fccb29d6b5f6d6aca09cbcfe1

  • SSDEEP

    12288:X6Wq4aaE6KwyF5L0Y2D1PqLb6Wq4aaE6KwyF5L0Y2D1PqLx6Wq4aaE6KwyF5L0YJ:1thEVaPqLBthEVaPqLHthEVaPqLTthX

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      12bee5a0f409509a09d5042769cea45e

    • Size

      960KB

    • MD5

      12bee5a0f409509a09d5042769cea45e

    • SHA1

      d49b0e3551f5602389294170768344a07ca7771b

    • SHA256

      e3b3f42cc2a24dd62ee89245d50dd815c87b033b45f402ec36e751b3b7b3288b

    • SHA512

      016391a9bb084857f770b23d088796e2cd08e27e52b162e0e7f7b479f0ecaa20ef72980848824d1ac6f6341a75c1628c8f2ac68fccb29d6b5f6d6aca09cbcfe1

    • SSDEEP

      12288:X6Wq4aaE6KwyF5L0Y2D1PqLb6Wq4aaE6KwyF5L0Y2D1PqLx6Wq4aaE6KwyF5L0YJ:1thEVaPqLBthEVaPqLHthEVaPqLTthX

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks