Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

defc129e02...97.exe

windows7-x64

7

defc129e02...97.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    defc129e02f7491018870c51036bf597

  • Size

    132KB

  • Sample

    240326-mxsrcsbd3w

  • MD5

    defc129e02f7491018870c51036bf597

  • SHA1

    9e01c5137ba14916c30250f6cf522b36a187b6ff

  • SHA256

    13a56059ac7409f978090af2a11e59bacb66f1e01f7529e5cf2fc1d366155a05

  • SHA512

    23ccd8e3e7bec9fb093f974524fdf410e7231e345fab5a0a97308b1b7e88e78b78d764b54c5c42962b2d0f62bcb40003940638f61c39d2f1dfc26f33b675680a

  • SSDEEP

    3072:twxVMhOC/dTDbq91+mno3t4QZQ3rt8iJk/lE5eu95PGmN4h:tTfFDbRnOTrt5JEE5eu9nN4h

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      defc129e02f7491018870c51036bf597

    • Size

      132KB

    • MD5

      defc129e02f7491018870c51036bf597

    • SHA1

      9e01c5137ba14916c30250f6cf522b36a187b6ff

    • SHA256

      13a56059ac7409f978090af2a11e59bacb66f1e01f7529e5cf2fc1d366155a05

    • SHA512

      23ccd8e3e7bec9fb093f974524fdf410e7231e345fab5a0a97308b1b7e88e78b78d764b54c5c42962b2d0f62bcb40003940638f61c39d2f1dfc26f33b675680a

    • SSDEEP

      3072:twxVMhOC/dTDbq91+mno3t4QZQ3rt8iJk/lE5eu95PGmN4h:tTfFDbRnOTrt5JEE5eu9nN4h

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks