Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a1b59d03f0a157cfef36e4c35d29e081

  • Size

    59KB

  • Sample

    240224-m8mdqahh63

  • MD5

    a1b59d03f0a157cfef36e4c35d29e081

  • SHA1

    d283877365574dffe682bbe213451acbb57e4b93

  • SHA256

    965da94c08c19da21787f84a00e45fa8c83d852c075a0265a1a7314d34ffbade

  • SHA512

    42086c2239e3b518b9b19c4b1379ffd9121bbbeabc342710b47e8e3a6656960b468bf72a57d2498c141295efdc83edb200e9de074297340fa1cb8a2d8ecd78f5

  • SSDEEP

    1536:MvU70UUfsjwIXu3/4ZmkBps+LXP6B+Jnouy83O:1zUEjwb3AZ++LXSB+Zout3O

Score
7/10

Malware Config

Targets

    • Target

      a1b59d03f0a157cfef36e4c35d29e081

    • Size

      59KB

    • MD5

      a1b59d03f0a157cfef36e4c35d29e081

    • SHA1

      d283877365574dffe682bbe213451acbb57e4b93

    • SHA256

      965da94c08c19da21787f84a00e45fa8c83d852c075a0265a1a7314d34ffbade

    • SHA512

      42086c2239e3b518b9b19c4b1379ffd9121bbbeabc342710b47e8e3a6656960b468bf72a57d2498c141295efdc83edb200e9de074297340fa1cb8a2d8ecd78f5

    • SSDEEP

      1536:MvU70UUfsjwIXu3/4ZmkBps+LXP6B+Jnouy83O:1zUEjwb3AZ++LXSB+Zout3O

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks