Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

895c978086...9e.exe

windows7-x64

9

895c978086...9e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    895c97808639685e11a80f3d0518d6b2c205a7cab255c169b15cb28f216e029e

  • Size

    23KB

  • Sample

    240421-ajw6eadg82

  • MD5

    c205f3805f746a0398e5801e38f8c941

  • SHA1

    99be3c55080d12cc65c9ec493c667669cc5ab854

  • SHA256

    895c97808639685e11a80f3d0518d6b2c205a7cab255c169b15cb28f216e029e

  • SHA512

    68aed5e3dadb254cabb07b16f2f05fd0bdc1af27478e8079b08cff0b9c2527987d72668ceed791f743ef7d8fc44449797767f5338ec4a2998d4ab4580f1c86cd

  • SSDEEP

    384:9+Aaw4UDLXxQ08jOW/QNij53BVk46vfiPe68tR6HjTiLx4rwYRJ:wAabUxy2Ni1BG46vfiPUt4niyUYf

Score
10/10
upx

Malware Config

Targets

    • Target

      895c97808639685e11a80f3d0518d6b2c205a7cab255c169b15cb28f216e029e

    • Size

      23KB

    • MD5

      c205f3805f746a0398e5801e38f8c941

    • SHA1

      99be3c55080d12cc65c9ec493c667669cc5ab854

    • SHA256

      895c97808639685e11a80f3d0518d6b2c205a7cab255c169b15cb28f216e029e

    • SHA512

      68aed5e3dadb254cabb07b16f2f05fd0bdc1af27478e8079b08cff0b9c2527987d72668ceed791f743ef7d8fc44449797767f5338ec4a2998d4ab4580f1c86cd

    • SSDEEP

      384:9+Aaw4UDLXxQ08jOW/QNij53BVk46vfiPe68tR6HjTiLx4rwYRJ:wAabUxy2Ni1BG46vfiPUt4niyUYf

    Score
    9/10
    upx

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks