Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

c40c08285a...88.exe

windows7-x64

8

c40c08285a...88.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c40c08285a61c1d46a2d3f5e55826988

  • Size

    85KB

  • Sample

    240312-w3cf1aab23

  • MD5

    c40c08285a61c1d46a2d3f5e55826988

  • SHA1

    b2b6eadfd39eaf39ab895215010e191c5d9e5c5d

  • SHA256

    10ad2285aa3dd91c7f4fc13195af80d7bd7ab6908ce2ebf8c357932ea6a423a0

  • SHA512

    c59e32a2823d04f79d529675150fa8ac5a01485254adecb2db3f85502fe176ea4c0ab06c8cd865dc61ddfe28e74360eeee9827b1a7721b5f55b3a4b7ae277759

  • SSDEEP

    1536:YrQsGzZmzK703Y7q6Vf3AQLFnToIfyTFjr5ZPN7WPHvR7J5sIF6NM1Rm:YrQdo6Vf3AQLtTBfyTFjr5ZPN7WXRJy3

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      c40c08285a61c1d46a2d3f5e55826988

    • Size

      85KB

    • MD5

      c40c08285a61c1d46a2d3f5e55826988

    • SHA1

      b2b6eadfd39eaf39ab895215010e191c5d9e5c5d

    • SHA256

      10ad2285aa3dd91c7f4fc13195af80d7bd7ab6908ce2ebf8c357932ea6a423a0

    • SHA512

      c59e32a2823d04f79d529675150fa8ac5a01485254adecb2db3f85502fe176ea4c0ab06c8cd865dc61ddfe28e74360eeee9827b1a7721b5f55b3a4b7ae277759

    • SSDEEP

      1536:YrQsGzZmzK703Y7q6Vf3AQLFnToIfyTFjr5ZPN7WPHvR7J5sIF6NM1Rm:YrQdo6Vf3AQLtTBfyTFjr5ZPN7WXRJy3

    Score
    8/10
    vmprotect

    • Drops file in Drivers directory

    • Deletes itself

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks