Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c4849207a94d1db4a0211f88e84b0b59

  • Size

    44KB

  • Sample

    240313-awnpsshd42

  • MD5

    c4849207a94d1db4a0211f88e84b0b59

  • SHA1

    32ef2a074d563370f46738565ecf9bb53c75909c

  • SHA256

    12a124cc2352f3ef68ddf06e0ed111c617d95cffd807dc502ae474960a60411c

  • SHA512

    4595c476f288edecdf9ddf441ce3ee0c8e2e4d0a69cdb533d157aaed490e6ee181f0844c38f399460b4e39fd7f11be1d561e2ea7b8823a0240f92f11b4a80529

  • SSDEEP

    768:nGJILQETLKVsHTcIFUUNIvKiuFdq/29VujFAPR4NP+s8yNzY:NRTLksHThteedTmjFTNP71Nz

Score
7/10
upx

Malware Config

Targets

    • Target

      c4849207a94d1db4a0211f88e84b0b59

    • Size

      44KB

    • MD5

      c4849207a94d1db4a0211f88e84b0b59

    • SHA1

      32ef2a074d563370f46738565ecf9bb53c75909c

    • SHA256

      12a124cc2352f3ef68ddf06e0ed111c617d95cffd807dc502ae474960a60411c

    • SHA512

      4595c476f288edecdf9ddf441ce3ee0c8e2e4d0a69cdb533d157aaed490e6ee181f0844c38f399460b4e39fd7f11be1d561e2ea7b8823a0240f92f11b4a80529

    • SSDEEP

      768:nGJILQETLKVsHTcIFUUNIvKiuFdq/29VujFAPR4NP+s8yNzY:NRTLksHThteedTmjFTNP71Nz

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks