Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

490bf4cf5e...13.exe

windows7-x64

3

490bf4cf5e...13.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    490bf4cf5e1694c35ecd742c05287613

  • Size

    107KB

  • Sample

    240107-p7ptkafhbk

  • MD5

    490bf4cf5e1694c35ecd742c05287613

  • SHA1

    2e73f6dd7ea6828b31a93fad91e58fac1062a26e

  • SHA256

    bc9c34b7bfbaa4a3be78ad770a96dc46f842bccf18d66e9c8a7ae67cde57884a

  • SHA512

    2c948a5b65f16a458387640e53bc9b58fced76d3f0313a1c06325cb9671eeaca2345dbebfe6e8adcd124b813a68bb251fcfbaf54d44bbd2ace551bc9f23936c8

  • SSDEEP

    3072:wKAzESIDMgeEgo4dFwnvPKKfNjdy7pHxSjqT:vKIDMcghwnXhIjSjE

Score
7/10
discoverypersistenceransomwareupx

Malware Config

Targets

    • Target

      490bf4cf5e1694c35ecd742c05287613

    • Size

      107KB

    • MD5

      490bf4cf5e1694c35ecd742c05287613

    • SHA1

      2e73f6dd7ea6828b31a93fad91e58fac1062a26e

    • SHA256

      bc9c34b7bfbaa4a3be78ad770a96dc46f842bccf18d66e9c8a7ae67cde57884a

    • SHA512

      2c948a5b65f16a458387640e53bc9b58fced76d3f0313a1c06325cb9671eeaca2345dbebfe6e8adcd124b813a68bb251fcfbaf54d44bbd2ace551bc9f23936c8

    • SSDEEP

      3072:wKAzESIDMgeEgo4dFwnvPKKfNjdy7pHxSjqT:vKIDMcghwnXhIjSjE

    Score
    7/10
    discoverypersistenceransomwareupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks