Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d8ac043190...13.exe

windows7-x64

9

d8ac043190...13.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8ac04319036f96ea225c1e51be2578652ab90b73600e34fe2faf7c0fbe9a713

  • Size

    39KB

  • Sample

    240620-em36cascqm

  • MD5

    6cbfaba7ff7f063f17e40603a8d6949f

  • SHA1

    dccd5bf5c56bf4180499b33fa1860bac017d4657

  • SHA256

    d8ac04319036f96ea225c1e51be2578652ab90b73600e34fe2faf7c0fbe9a713

  • SHA512

    ef63cd3db0825acf284cf641c64444b54bf521bb4a4f19354371d419fa38322f0a721095792e91824f4fb9f9602b2f8b27d68236c48f1b7b87ade97e8ee7e7fc

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9G:qDdFJy3QMOtEvwDpjjWMl7T9

Score
10/10
upx

Malware Config

Targets

    • Target

      d8ac04319036f96ea225c1e51be2578652ab90b73600e34fe2faf7c0fbe9a713

    • Size

      39KB

    • MD5

      6cbfaba7ff7f063f17e40603a8d6949f

    • SHA1

      dccd5bf5c56bf4180499b33fa1860bac017d4657

    • SHA256

      d8ac04319036f96ea225c1e51be2578652ab90b73600e34fe2faf7c0fbe9a713

    • SHA512

      ef63cd3db0825acf284cf641c64444b54bf521bb4a4f19354371d419fa38322f0a721095792e91824f4fb9f9602b2f8b27d68236c48f1b7b87ade97e8ee7e7fc

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9G:qDdFJy3QMOtEvwDpjjWMl7T9

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks