Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    PandaPasswords.zip

  • Size

    7.2MB

  • Sample

    240404-zya9xsbb39

  • MD5

    25399c8e2ca04e3c3c4180687997a316

  • SHA1

    e6ae53c6a74bf607144515a8a492f164d86d6472

  • SHA256

    eb72729b713882d6fa23e0c25a0b3e734f281d44fac179d7b9e898c169ee1e46

  • SHA512

    4171b322bb51bfc87473799c64a711669faa7418a61ddc92fb18583a41fb30fac86df22dd1f8b54e6f645983cceda058878b7518a60cb29d15dc4efb2bc49848

  • SSDEEP

    196608:P5MyK24Jg2SRJ1FJXBdkTRDq+c1UpEEyDktlxEdlD4:PRK24J23NU4+c+2RDoMZ4

Score
10/10

Malware Config

Targets

    • Target

      PandaPasswords.zip

    • Size

      7.2MB

    • MD5

      25399c8e2ca04e3c3c4180687997a316

    • SHA1

      e6ae53c6a74bf607144515a8a492f164d86d6472

    • SHA256

      eb72729b713882d6fa23e0c25a0b3e734f281d44fac179d7b9e898c169ee1e46

    • SHA512

      4171b322bb51bfc87473799c64a711669faa7418a61ddc92fb18583a41fb30fac86df22dd1f8b54e6f645983cceda058878b7518a60cb29d15dc4efb2bc49848

    • SSDEEP

      196608:P5MyK24Jg2SRJ1FJXBdkTRDq+c1UpEEyDktlxEdlD4:PRK24J23NU4+c+2RDoMZ4

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks