Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8b8a07367ba7ccc9100b8383afb1a874ab12d59ae00890ede1b3d48c884d3608

  • Size

    49KB

  • Sample

    240407-251jhahe36

  • MD5

    a27a9bf64b14b319e115720b690a4f47

  • SHA1

    202a3930dc2c2b202d517237f89c6e38555f9db8

  • SHA256

    8b8a07367ba7ccc9100b8383afb1a874ab12d59ae00890ede1b3d48c884d3608

  • SHA512

    91e614635056e2785305f7b6ff487b47cda1687ea2c192e416c5aaf87266086e048e1f7cdaaed8b1a35599b8960108536e52bba6a5581e1722bffaf8147123fc

  • SSDEEP

    768:t4+PhlWX4NtT8P9QRyqiotQpZ407chTKvDHkA7TsxrEfWzI+lktJYL:eSoXgozqCAhTKvo6T6rEfuI30L

Score
10/10

Malware Config

Targets

    • Target

      8b8a07367ba7ccc9100b8383afb1a874ab12d59ae00890ede1b3d48c884d3608

    • Size

      49KB

    • MD5

      a27a9bf64b14b319e115720b690a4f47

    • SHA1

      202a3930dc2c2b202d517237f89c6e38555f9db8

    • SHA256

      8b8a07367ba7ccc9100b8383afb1a874ab12d59ae00890ede1b3d48c884d3608

    • SHA512

      91e614635056e2785305f7b6ff487b47cda1687ea2c192e416c5aaf87266086e048e1f7cdaaed8b1a35599b8960108536e52bba6a5581e1722bffaf8147123fc

    • SSDEEP

      768:t4+PhlWX4NtT8P9QRyqiotQpZ407chTKvDHkA7TsxrEfWzI+lktJYL:eSoXgozqCAhTKvo6T6rEfuI30L

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks