Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

1

2024-01-24...ia.exe

windows7-x64

9

2024-01-24...ia.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-24_cc766a6ae174c13b2e6fab8b19093985_floxif_mafia

  • Size

    352KB

  • Sample

    240124-rp7mrsceb8

  • MD5

    cc766a6ae174c13b2e6fab8b19093985

  • SHA1

    fa897ef0a70ee1a0d6fd7da44a7abce873f39bcb

  • SHA256

    50f8d29d89d0fd6b5bf0108762d925f613dcd1d8e4d495a424ba2bc05f256605

  • SHA512

    f2ef9a4df84578b5b0113122d14a669470e67961c69c4c7190831816de38bced6a04f8a83210cfa4ea1213751f54aa32b90be46b4e2c8243af1fcc766ed8f8f6

  • SSDEEP

    6144:uRhZxGeYXhouzujD6ivpRF8duMoHK9GpN7+BTiWeiHsQvMRlkM4RD/qzMfULbM:iGzXhvz0DJ76uMoHK9Gp9+Bmi5MRGM4d

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      2024-01-24_cc766a6ae174c13b2e6fab8b19093985_floxif_mafia

    • Size

      352KB

    • MD5

      cc766a6ae174c13b2e6fab8b19093985

    • SHA1

      fa897ef0a70ee1a0d6fd7da44a7abce873f39bcb

    • SHA256

      50f8d29d89d0fd6b5bf0108762d925f613dcd1d8e4d495a424ba2bc05f256605

    • SHA512

      f2ef9a4df84578b5b0113122d14a669470e67961c69c4c7190831816de38bced6a04f8a83210cfa4ea1213751f54aa32b90be46b4e2c8243af1fcc766ed8f8f6

    • SSDEEP

      6144:uRhZxGeYXhouzujD6ivpRF8duMoHK9GpN7+BTiWeiHsQvMRlkM4RD/qzMfULbM:iGzXhvz0DJ76uMoHK9Gp9+Bmi5MRGM4d

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks