Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f42f0f45c6cd6bcd586013505217ae6b52b9ed0d8af112bb20c1600693f41275

  • Size

    666KB

  • Sample

    240609-pkmqpabb57

  • MD5

    b1fdb7b2312f381772f5482d9a26f1e6

  • SHA1

    380d0d15dbd1de193bbd24e8f733ddc7e902d606

  • SHA256

    f42f0f45c6cd6bcd586013505217ae6b52b9ed0d8af112bb20c1600693f41275

  • SHA512

    0ecaee1359001e86c57ade7fc3d71aa7d9730c05321a0254dd3db87ab356a43a2f3a577fbf9479df74e6d7fc917a3a39054a7e15574ae4ca6c467c36e4106e1b

  • SSDEEP

    12288:KbDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMf/:KXbs48LeP0P8E6dclWLi26KGOqMwIMn

Score
10/10

Malware Config

Targets

    • Target

      f42f0f45c6cd6bcd586013505217ae6b52b9ed0d8af112bb20c1600693f41275

    • Size

      666KB

    • MD5

      b1fdb7b2312f381772f5482d9a26f1e6

    • SHA1

      380d0d15dbd1de193bbd24e8f733ddc7e902d606

    • SHA256

      f42f0f45c6cd6bcd586013505217ae6b52b9ed0d8af112bb20c1600693f41275

    • SHA512

      0ecaee1359001e86c57ade7fc3d71aa7d9730c05321a0254dd3db87ab356a43a2f3a577fbf9479df74e6d7fc917a3a39054a7e15574ae4ca6c467c36e4106e1b

    • SSDEEP

      12288:KbDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMf/:KXbs48LeP0P8E6dclWLi26KGOqMwIMn

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks