Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2b4abcd116797228509c1ad692478660N.exe

  • Size

    59KB

  • Sample

    240722-3f4ejathqb

  • MD5

    2b4abcd116797228509c1ad692478660

  • SHA1

    d7c5d6a867992dec236fa4f3ef69ad8a9693a809

  • SHA256

    162a506435a80ab3109bd2bd9f829eaf8f228220ff350dd102db11c481dfc4fc

  • SHA512

    d3e4ff58e60af702bb2bfcc297c3d3187758f576815a64a9a2a18d1eec1883a6e2f4c9303b809020ed880c761687b5520e4a337d15885630c3d6ecbfa81c0108

  • SSDEEP

    1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQ/:OeodiUO4p13b9HiIeoutuh1aQ/

Score
7/10

Malware Config

Targets

    • Target

      2b4abcd116797228509c1ad692478660N.exe

    • Size

      59KB

    • MD5

      2b4abcd116797228509c1ad692478660

    • SHA1

      d7c5d6a867992dec236fa4f3ef69ad8a9693a809

    • SHA256

      162a506435a80ab3109bd2bd9f829eaf8f228220ff350dd102db11c481dfc4fc

    • SHA512

      d3e4ff58e60af702bb2bfcc297c3d3187758f576815a64a9a2a18d1eec1883a6e2f4c9303b809020ed880c761687b5520e4a337d15885630c3d6ecbfa81c0108

    • SSDEEP

      1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQ/:OeodiUO4p13b9HiIeoutuh1aQ/

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks