Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

0af6b08292...8f.exe

windows7-x64

7

0af6b08292...8f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0af6b082925452ebea3da8a972c26282600e0644501c87db49fb2cf0d4c19d8f

  • Size

    58KB

  • Sample

    240429-w3sg8ahd64

  • MD5

    08c12f2e2d555fb9b0247411276d1c46

  • SHA1

    17bcdc2d577fe07a031ab464e0ecb723d6b45da9

  • SHA256

    0af6b082925452ebea3da8a972c26282600e0644501c87db49fb2cf0d4c19d8f

  • SHA512

    de6ab695408eef8488bf54e3fa6e2324450cf00451e3a0460589ad8b538c95bf30ed21f4dd660faa68350be3d57dfe72f6dce9bf7e8f3943d955d629a6652011

  • SSDEEP

    1536:QHK+ZHaTXNZOxpZTy1IsTTm84rz5iiwSS:QHpRaT+plyGsTTl2if

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      0af6b082925452ebea3da8a972c26282600e0644501c87db49fb2cf0d4c19d8f

    • Size

      58KB

    • MD5

      08c12f2e2d555fb9b0247411276d1c46

    • SHA1

      17bcdc2d577fe07a031ab464e0ecb723d6b45da9

    • SHA256

      0af6b082925452ebea3da8a972c26282600e0644501c87db49fb2cf0d4c19d8f

    • SHA512

      de6ab695408eef8488bf54e3fa6e2324450cf00451e3a0460589ad8b538c95bf30ed21f4dd660faa68350be3d57dfe72f6dce9bf7e8f3943d955d629a6652011

    • SSDEEP

      1536:QHK+ZHaTXNZOxpZTy1IsTTm84rz5iiwSS:QHpRaT+plyGsTTl2if

    Score
    7/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks