Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NCUpdater.vmp.exe

  • Size

    1.3MB

  • Sample

    240712-gy87va1gkq

  • MD5

    0ebac849d6173d27bd3735611b175a76

  • SHA1

    9463bea6850af8785efb72880a364d6f13d0bd41

  • SHA256

    155c4b7a9a3921130464465cc531c6b1ae7caa07aade39cbcba31a10c38657ed

  • SHA512

    f1d28bf99cc8c94353ee5c30bb1035ccd282cc5bc82982103a839add7163cd69fc00a9a7bb99dae7e6c1dd11fb538cc4a4cde0b6812ec59325b2b5aafa0e3664

  • SSDEEP

    24576:GxZ+EUPw+NSbiePwCG9cEYOswSxq5lb358QFy7fy1R91ihJUknhXygOk742socaE:0+E8w+N+4C/EYOswSxq5lb358ay7fy1X

Score
7/10

Malware Config

Targets

    • Target

      NCUpdater.vmp.exe

    • Size

      1.3MB

    • MD5

      0ebac849d6173d27bd3735611b175a76

    • SHA1

      9463bea6850af8785efb72880a364d6f13d0bd41

    • SHA256

      155c4b7a9a3921130464465cc531c6b1ae7caa07aade39cbcba31a10c38657ed

    • SHA512

      f1d28bf99cc8c94353ee5c30bb1035ccd282cc5bc82982103a839add7163cd69fc00a9a7bb99dae7e6c1dd11fb538cc4a4cde0b6812ec59325b2b5aafa0e3664

    • SSDEEP

      24576:GxZ+EUPw+NSbiePwCG9cEYOswSxq5lb358QFy7fy1R91ihJUknhXygOk742socaE:0+E8w+N+4C/EYOswSxq5lb358ay7fy1X

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks