Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

使用必读.url

windows7-x64

1

使用必读.url

windows10-2004-x64

1

小型文�....1.exe

windows7-x64

7

小型文�....1.exe

windows10-2004-x64

7

绿色先�...��.url

windows7-x64

1

绿色先�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60154f26e35d0ce2102f49a1154ef66c_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240520-t2avnshh2y

  • MD5

    60154f26e35d0ce2102f49a1154ef66c

  • SHA1

    98e938fdce1ccd056dda389dac31bcd1d0044da0

  • SHA256

    84477dbd0706434cb5beca52680f5028ad1119113248c64c28f7b0e6f0404f0e

  • SHA512

    dad450c1b3a3e1417b0ea8bca1286306c8eb90c912f6877dbbf6df8bc6e2c2a511a2944d68f85b26f1724e0e21e88c6a4fd66348cb21486c47dc71fc604f1c20

  • SSDEEP

    24576:zJ8jIxaKclF+DvoAlD0Kh4A25GQDMMgISU35GD26V7XXBPh87:zJtaKq+oAlDBh83gISUpGy6V7XXBy

Score
7/10
upx

Malware Config

Targets

    • Target

      使用必读.url

    • Size

      125B

    • MD5

      379cd9bc5f7937f7414191c65d8a4979

    • SHA1

      e0fb340fe107b422f33439512016e68eca29b03d

    • SHA256

      42c63721e8fad25c6454683e82365a3ceb55a4e520b7b15fe8ec022b3db3fc2b

    • SHA512

      f0ce028625e6791c1ca729cf9966516f6c67bfcc40eff50f7c804c5da88a13aac4a55541d47e5adaad3672f8702288ef1b592fb47c335da5be401cc8c6a13d00

    Score
    1/10
    behavioral1behavioral2

    • Target

      小型文件捆绑器v1.1.exe

    • Size

      1.6MB

    • MD5

      05a6d06d0d9e606336f39ade9b0be1fa

    • SHA1

      7654c4ae85b8aec673ea68da7fa4a72dc8fdd60f

    • SHA256

      414e2d416596ebd32f2b4664964e4340a4c0ce9ad576c88f0272210d85c3911a

    • SHA512

      3be9af300f832f7d9fb050562132de17096b8cab7b7f441058d262fc4257f47064324c30f82706e0fca80c5392ad0caac71ac4f84816dafd79772115333a70c4

    • SSDEEP

      24576:E7AFdggl6Rz3kKgN4vLIL9W6XwlTZaqdiXSp0c02uFG6dAk3CMtK:ETg60amhoTZaqdwk0c05HGiQ

    Score
    7/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      绿色先锋下载.url

    • Size

      325B

    • MD5

      c7728418b7817af20083617d2a7bde97

    • SHA1

      f8cac36816b472018d97e97485e92ee5d7bd4b24

    • SHA256

      d31d7893e0cfd730022933decbcc420c1169c2715ffecb804ba685f30b99df80

    • SHA512

      ff30d9bf14ff78eb3080c5e07aecf3d60827833c475ae6c96ed5f4217ecc2a9a25d1e3c0aa4fee5950cccd2601cd10f4f0c2e8428bfc5795c7c3438455621c21

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Matrix

Tasks