Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5253f7a06c69c8bed0eee411a7e0bb55

  • Size

    39KB

  • Sample

    240111-danpfseag7

  • MD5

    5253f7a06c69c8bed0eee411a7e0bb55

  • SHA1

    3a3f36e94ad74a700bc6d48a498773de192bec17

  • SHA256

    a6d0900830daa30ced5171f0c6863a235dc1b676c18924162758eb1baec8c605

  • SHA512

    6a0869c21f89c392c96a64f5899a59904b3bc5239e6c6852b16143d852eccdc00eab147e68bdf5886ead6afeb1ec68534d018b9b4b5f28ef068a026d838c6bc2

  • SSDEEP

    768:Rik+jTpwqPyR9qKARp1tgeWLikd0WwHj2c:RibCci9qXRrtgeWLikd62c

Score
7/10
upx

Malware Config

Targets

    • Target

      5253f7a06c69c8bed0eee411a7e0bb55

    • Size

      39KB

    • MD5

      5253f7a06c69c8bed0eee411a7e0bb55

    • SHA1

      3a3f36e94ad74a700bc6d48a498773de192bec17

    • SHA256

      a6d0900830daa30ced5171f0c6863a235dc1b676c18924162758eb1baec8c605

    • SHA512

      6a0869c21f89c392c96a64f5899a59904b3bc5239e6c6852b16143d852eccdc00eab147e68bdf5886ead6afeb1ec68534d018b9b4b5f28ef068a026d838c6bc2

    • SSDEEP

      768:Rik+jTpwqPyR9qKARp1tgeWLikd0WwHj2c:RibCci9qXRrtgeWLikd62c

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks