Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9c41cc8495aba84f1a17f15a760cc955

  • Size

    104KB

  • Sample

    240214-v5mjbahg95

  • MD5

    9c41cc8495aba84f1a17f15a760cc955

  • SHA1

    f0c4512e71cb1d1d77ab1e99815148e20ae08163

  • SHA256

    884d7714277f2e439843f54b9f9fcba098bc45f1a4b101dfc0f2e6cd983968e8

  • SHA512

    3070875bcc0c8be4977fbf440ecf473365378a1f4fb2e662adba68c252e342354b66c6c09fbdde1165850fcaef80ee17ed66ad64cd6f4b1eb61f6195afd834a2

  • SSDEEP

    3072:KVidQr0UZqnnSTqPu6V4aGCWRZX0bhp0vcsjsr8gWt8C1dCuf9MJEb+o:Xr9O+o

Score
8/10
upx

Malware Config

Targets

    • Target

      9c41cc8495aba84f1a17f15a760cc955

    • Size

      104KB

    • MD5

      9c41cc8495aba84f1a17f15a760cc955

    • SHA1

      f0c4512e71cb1d1d77ab1e99815148e20ae08163

    • SHA256

      884d7714277f2e439843f54b9f9fcba098bc45f1a4b101dfc0f2e6cd983968e8

    • SHA512

      3070875bcc0c8be4977fbf440ecf473365378a1f4fb2e662adba68c252e342354b66c6c09fbdde1165850fcaef80ee17ed66ad64cd6f4b1eb61f6195afd834a2

    • SSDEEP

      3072:KVidQr0UZqnnSTqPu6V4aGCWRZX0bhp0vcsjsr8gWt8C1dCuf9MJEb+o:Xr9O+o

    Score
    8/10
    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks