Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    StardockWindowFX6.13.v.taiwebs.com.zip

  • Size

    21.1MB

  • Sample

    240422-ywb8rsfe64

  • MD5

    774263172ac88eeb143a478f7d6db8fb

  • SHA1

    50a5a44086fe985fc07397a955b4827c7d82e261

  • SHA256

    34f46b207d6155ea25b0ba55874b41fdd73472b304368a003fe5f3f61cc0b6fd

  • SHA512

    5bb7d838c62f2aba95b6a923c262673521ba24c380561722fc9a177f5f4a8fe27de89566f80eee6fb3c4eee9b9449b66bcaeb5aef07bfb272143f45b1aae3495

  • SSDEEP

    393216:vNuiM4PildBQ9YV5jmpPSzE1eLF8MxwkA2zg9us76zTMNdMJItPG4lpBknV1eqQ8:luiMNQ9YxAm/wV9jmzidntPGOqbeloV

Score
7/10

Malware Config

Targets

    • Target

      Stardock WindowFX 6.13/Readme.txt

    • Size

      298B

    • MD5

      6dae0f5f7fd4a95f8a77fb5ae7aa5ecd

    • SHA1

      a8bc204ef4259949b6b1a123a9c0d47f026c47a3

    • SHA256

      b0b4aa373798b4294a59b2ce3be425f35c97a806872f69c7131b68244d7a91f2

    • SHA512

      723a65867ff4191831c40a1212e3552a9f54907d0c4fc8612ca71432fab7e107f11b8dc66b54787df81fa6d44c815eead6339ba9fc318ae20312d816717a1b76

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks