Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

WPS Office_12.1.1.exe

windows7-x64

10

WPS Office_12.1.1.exe

windows10-2004-x64

10

Resubmissions

09/08/2024, 07:51

240809-jp7zjayajn 10

09/08/2024, 07:46

240809-jl755asalb 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WPS Office_12.1.1.exe.vir

  • Size

    350.9MB

  • Sample

    240809-jp7zjayajn

  • MD5

    18ffc2a9a2e45db4188a8ec632e8ac9b

  • SHA1

    57998f5f51796f2e225abd50bc6c94c8023649de

  • SHA256

    6997d3ef9707fd9b38ca14ae785c5eff641a909d29a1777fe9d18df8ae2dcb7a

  • SHA512

    de2b83eb8599bc45c911fce457cb38b9049b3077c05290530649f58d413c699a1e51f2cdc17f4da9b6ae4d3b30cf7b15d8716de6b5dce2af6a7ef6fa5159e11b

  • SSDEEP

    6291456:y43ehrvHTVOE1n6nSXfhO2d8nPkWvGmGeSIgAaeavINP8pIDzC97TJ42Vh1ovNET:+hrvHTV56ahO2d8nPpemeXv+UqC9fJ4a

Score
10/10
discoveryevasiontrojanupx

Malware Config

Targets

    • Target

      WPS Office_12.1.1.exe.vir

    • Size

      350.9MB

    • MD5

      18ffc2a9a2e45db4188a8ec632e8ac9b

    • SHA1

      57998f5f51796f2e225abd50bc6c94c8023649de

    • SHA256

      6997d3ef9707fd9b38ca14ae785c5eff641a909d29a1777fe9d18df8ae2dcb7a

    • SHA512

      de2b83eb8599bc45c911fce457cb38b9049b3077c05290530649f58d413c699a1e51f2cdc17f4da9b6ae4d3b30cf7b15d8716de6b5dce2af6a7ef6fa5159e11b

    • SSDEEP

      6291456:y43ehrvHTVOE1n6nSXfhO2d8nPkWvGmGeSIgAaeavINP8pIDzC97TJ42Vh1ovNET:+hrvHTV56ahO2d8nPpemeXv+UqC9fJ4a

    Score
    10/10
    discoveryevasiontrojanupx

    • UAC bypass

      evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks