Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

c7473898ca...2b.exe

windows7-x64

7

c7473898ca...2b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7473898cab36024d629c4250dc75c2b

  • Size

    359KB

  • Sample

    240314-bard8sef5v

  • MD5

    c7473898cab36024d629c4250dc75c2b

  • SHA1

    e0b3dda2a3b33fed6f3987c0b46c459d8d585d2b

  • SHA256

    55cb40f542cc5908da071759348396a3e5cdfc5187a68231fbe64504ccfaf41e

  • SHA512

    376a2eca5d64bb8f3f4f5faa412fefd134bde2624c61875cc47cf213106e6892ea9f9ab86014e13c7a00061dab8756916e401f16deccb4863e584cf6852c04a7

  • SSDEEP

    6144:jN4TPF4oSOgFfFoSeDkXSmuWVhc+zQGA9I/0UTla/ZQEkl808LE:xI94oSZfFoSfCmnViN9I/yIb

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      c7473898cab36024d629c4250dc75c2b

    • Size

      359KB

    • MD5

      c7473898cab36024d629c4250dc75c2b

    • SHA1

      e0b3dda2a3b33fed6f3987c0b46c459d8d585d2b

    • SHA256

      55cb40f542cc5908da071759348396a3e5cdfc5187a68231fbe64504ccfaf41e

    • SHA512

      376a2eca5d64bb8f3f4f5faa412fefd134bde2624c61875cc47cf213106e6892ea9f9ab86014e13c7a00061dab8756916e401f16deccb4863e584cf6852c04a7

    • SSDEEP

      6144:jN4TPF4oSOgFfFoSeDkXSmuWVhc+zQGA9I/0UTla/ZQEkl808LE:xI94oSZfFoSfCmnViN9I/yIb

    Score
    7/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks