Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

粉网封�...��.exe

windows7-x64

7

粉网封�...��.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b893801756260a244917fa042c6f88d1_JaffaCakes118

  • Size

    434KB

  • Sample

    240822-wjyvwszerb

  • MD5

    b893801756260a244917fa042c6f88d1

  • SHA1

    fe08aa67d2e691e638b9aabbc26178c996fdbc38

  • SHA256

    69f159bba482fed9f06dd1d682638eef57b73973ffb03deb55fb8090cd9713ef

  • SHA512

    5a61a5fec603d9aae453f7d5f5448c747445e12370a4f7829a640ffd2986eafc78c0e950ade61c38aa2389681b4218aad39d6409a76c7ff16188c31cadb48c07

  • SSDEEP

    12288:ilbpKjMYvx2iNUNff8gUA/oWHp4EsRi6tK+clu+vCMeD:kYvPKNMSQ44EI0+D+KX

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      155绿色软件站.url

    • Size

      192B

    • MD5

      7c66e57a82c860a68878ba90b6b2eb79

    • SHA1

      95f904868b801246dfb0ec5f16fbebf6581b6ec9

    • SHA256

      d557ba54b7f7ee1f6e6756b3a2ac9763a12aaf0baf5ea5c139dcc6828e3aa772

    • SHA512

      b93c3bf612d912663f7ac27f74c82bc4785f34002de8b2b930792a332f7a9362903eec68afcf624b1930c4837e7997a95fc559d36657be41f5d85c1895f10750

    Score
    1/10
    behavioral1behavioral2

    • Target

      粉网封包拦截器.exe

    • Size

      453KB

    • MD5

      000a268c8913ae0e339f69c054ccfd4f

    • SHA1

      4db2c0fade55b74bd3a900dc08895af6f065e150

    • SHA256

      2c93b4053494aace288c18fa6474d3eb2d1da349ac8c9feb86f19d062bed1a22

    • SHA512

      971cec1b5b3edc52eca85238db7ee3621da5e4d9d3438c59351d03fb3a36ac71f289542d12ab0ae3759efa0fedc5caae7fabca4c6bc660ae481952758fd07238

    • SSDEEP

      12288:ZSpatrHaWlEoJDMQDEJs823HwtoO8DW7FDFGBrk:Q+aWlEoJDMQDEC823HHjDW7Bz

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks