Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-12_4d4873b6ecc0370ed399643cf982326a_mafia

  • Size

    1015KB

  • Sample

    240612-gdm4wascke

  • MD5

    4d4873b6ecc0370ed399643cf982326a

  • SHA1

    94b73d7c567fb66cd6718e9e1ed49a3a09aaf39b

  • SHA256

    e53adf33df1c2609a8692d4ad1651565b62d2b5e0bb5c28244da4c66790c6a5f

  • SHA512

    03daef0d83fb652a76774d3bf3f9960f2edff9cf183b985e399322a68845afd755f541112ac9cb7ebeb26723a1625b2c77aed43b71c64be3a1fd3b9f595a8164

  • SSDEEP

    24576:faXNJQVJvxC3ZnobLzB/3gQvExFpdhC55AKDqsc53vTkO/3A:1JvCZo7B/gkUrMvLqscVF/w

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-12_4d4873b6ecc0370ed399643cf982326a_mafia

    • Size

      1015KB

    • MD5

      4d4873b6ecc0370ed399643cf982326a

    • SHA1

      94b73d7c567fb66cd6718e9e1ed49a3a09aaf39b

    • SHA256

      e53adf33df1c2609a8692d4ad1651565b62d2b5e0bb5c28244da4c66790c6a5f

    • SHA512

      03daef0d83fb652a76774d3bf3f9960f2edff9cf183b985e399322a68845afd755f541112ac9cb7ebeb26723a1625b2c77aed43b71c64be3a1fd3b9f595a8164

    • SSDEEP

      24576:faXNJQVJvxC3ZnobLzB/3gQvExFpdhC55AKDqsc53vTkO/3A:1JvCZo7B/gkUrMvLqscVF/w

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks