Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

42a233bc76...50.exe

windows7-x64

7

42a233bc76...50.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42a233bc767df8f7afe72f95a0758c1d93ce752451273f4c6704c91baa786750

  • Size

    6.5MB

  • Sample

    240529-afkm7sab2z

  • MD5

    b06a8127099fdee5094bf069bf556da9

  • SHA1

    6a9c3fe67afbad7bbaaffd597400c5150139cc7e

  • SHA256

    42a233bc767df8f7afe72f95a0758c1d93ce752451273f4c6704c91baa786750

  • SHA512

    2015ad2d4ec8acf8879d8d823165082aa7b22d2d62d165ebd215f873b5ef92e3f7958351e090a2693e518ab4bf5db2b25111320ecfca19aaed33d40b3d6f83e9

  • SSDEEP

    196608:djg96eU+pmutBS/DC19D2qCwS8EImIQpajJQRaG9JK78WXN:dRx+suC/O19EVBIQUdQcG9JK78WXN

Score
7/10
upxvmprotect

Malware Config

Targets

    • Target

      42a233bc767df8f7afe72f95a0758c1d93ce752451273f4c6704c91baa786750

    • Size

      6.5MB

    • MD5

      b06a8127099fdee5094bf069bf556da9

    • SHA1

      6a9c3fe67afbad7bbaaffd597400c5150139cc7e

    • SHA256

      42a233bc767df8f7afe72f95a0758c1d93ce752451273f4c6704c91baa786750

    • SHA512

      2015ad2d4ec8acf8879d8d823165082aa7b22d2d62d165ebd215f873b5ef92e3f7958351e090a2693e518ab4bf5db2b25111320ecfca19aaed33d40b3d6f83e9

    • SSDEEP

      196608:djg96eU+pmutBS/DC19D2qCwS8EImIQpajJQRaG9JK78WXN:dRx+suC/O19EVBIQUdQcG9JK78WXN

    Score
    7/10
    upxvmprotect

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks