Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-16_33a88fe3746970936e8dc457df66151d_floxif_mafia

  • Size

    2.5MB

  • Sample

    240416-pk96zsac28

  • MD5

    33a88fe3746970936e8dc457df66151d

  • SHA1

    849521ff645519fbe16ddc1b77b047c25628154f

  • SHA256

    13207b959f53ce330ebbd318768fcf96fb65b1562acfd798dc4e5a075e450808

  • SHA512

    40546aaf02bb14d9cc0e0268732e9d6e4e002376ec656ae4e55cc00c783699adc1d7079b88be8708be7924767d29e51c96ba0e35af4d6701cdd087116cfebfab

  • SSDEEP

    49152:cuIIKSofs2hPd2l177BTK2VbDsar1YDji:cjvfs2hPIl1/h

Score
9/10
upx

Malware Config

Targets

    • Target

      2024-04-16_33a88fe3746970936e8dc457df66151d_floxif_mafia

    • Size

      2.5MB

    • MD5

      33a88fe3746970936e8dc457df66151d

    • SHA1

      849521ff645519fbe16ddc1b77b047c25628154f

    • SHA256

      13207b959f53ce330ebbd318768fcf96fb65b1562acfd798dc4e5a075e450808

    • SHA512

      40546aaf02bb14d9cc0e0268732e9d6e4e002376ec656ae4e55cc00c783699adc1d7079b88be8708be7924767d29e51c96ba0e35af4d6701cdd087116cfebfab

    • SSDEEP

      49152:cuIIKSofs2hPd2l177BTK2VbDsar1YDji:cjvfs2hPIl1/h

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks