Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

95c8d93702...0N.exe

windows7-x64

7

95c8d93702...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95c8d93702e7063e7db9555969545540N.exe

  • Size

    304KB

  • Sample

    240722-lsqkrs1grm

  • MD5

    95c8d93702e7063e7db9555969545540

  • SHA1

    31fb6c9b10e2a75634fe6fbd3fbe23eeb85bf569

  • SHA256

    de4ec1fb441ef422cd308ccb378f490ee728f8dc89b7f0cac4056c72e5474960

  • SHA512

    d6b960ce8dbfaa9b3684f2a1e7dfbeb5f634e13c00131b9263880612215441abebd42a1c94766ec83307a1009bcc423f70942be9978cde80fa40b08510f9a9fa

  • SSDEEP

    3072:fHUm8QyMWSVCqwT1h+popOOfaPOx5P+m/pNdhZ1QYUdqz:fQqwJh+6pAkGm/pH1gdq

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      95c8d93702e7063e7db9555969545540N.exe

    • Size

      304KB

    • MD5

      95c8d93702e7063e7db9555969545540

    • SHA1

      31fb6c9b10e2a75634fe6fbd3fbe23eeb85bf569

    • SHA256

      de4ec1fb441ef422cd308ccb378f490ee728f8dc89b7f0cac4056c72e5474960

    • SHA512

      d6b960ce8dbfaa9b3684f2a1e7dfbeb5f634e13c00131b9263880612215441abebd42a1c94766ec83307a1009bcc423f70942be9978cde80fa40b08510f9a9fa

    • SSDEEP

      3072:fHUm8QyMWSVCqwT1h+popOOfaPOx5P+m/pNdhZ1QYUdqz:fQqwJh+6pAkGm/pH1gdq

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks