Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ac9268cb2641b313f7460ce40169e59b.exe

  • Size

    5KB

  • Sample

    240107-xydzpsdbb9

  • MD5

    ac9268cb2641b313f7460ce40169e59b

  • SHA1

    e32b781c7d15cd0e1354edd4e488e2750706e278

  • SHA256

    d3aceee88f292e6bc52b4fe8eb9de669fe612e62ed4717ef05aaaf6eea29c569

  • SHA512

    7b31c764279a959830c02a65fad81a1bcbfb8e41a6c00dcc8d68a0d6b925d782c73b8474f3e9ed1ec6e31801400886136dca459956e9201c45e83ad14c41d41f

  • SSDEEP

    96:vfycZ+ALBd3vJEtPsCZIB2oPRGHzb7v1JydcRxN:ny2tLHR4sCOD8HD117N

Score
10/10

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

http://chaliang.115ku.cn/1261/yahooo.htm%22,0%29%28window.close%29

Targets

    • Target

      ac9268cb2641b313f7460ce40169e59b.exe

    • Size

      5KB

    • MD5

      ac9268cb2641b313f7460ce40169e59b

    • SHA1

      e32b781c7d15cd0e1354edd4e488e2750706e278

    • SHA256

      d3aceee88f292e6bc52b4fe8eb9de669fe612e62ed4717ef05aaaf6eea29c569

    • SHA512

      7b31c764279a959830c02a65fad81a1bcbfb8e41a6c00dcc8d68a0d6b925d782c73b8474f3e9ed1ec6e31801400886136dca459956e9201c45e83ad14c41d41f

    • SSDEEP

      96:vfycZ+ALBd3vJEtPsCZIB2oPRGHzb7v1JydcRxN:ny2tLHR4sCOD8HD117N

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks