Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

389be27177...0N.exe

windows7-x64

8

389be27177...0N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    389be271777119b0ff7efe2a3714f130N

  • Size

    23KB

  • Sample

    240911-qahjnasbqg

  • MD5

    389be271777119b0ff7efe2a3714f130

  • SHA1

    1641c0c917d6c498775ff9577fb41bdf0cf7c6b2

  • SHA256

    5b084762eda98304bfce1ad32426c4f08a41ad56790547d206b48461c008c118

  • SHA512

    aa394196c3dbb1fd38dc43267ae3a1eda8c9ce5f946beebbb29808ee6c2589d70919af5a3a430c52aca0fe60356c5179c92dbbb5043bb038a1eb376797029e1b

  • SSDEEP

    384:+J5+c5mibCpKAjndr3Vo4G/usaNJawcudoD7UXlOIJquYT:uAcYimoqdm9gnbcuyD7U19m

Score
8/10
defense_evasiondiscoveryevasionupx

Malware Config

Targets

    • Target

      389be271777119b0ff7efe2a3714f130N

    • Size

      23KB

    • MD5

      389be271777119b0ff7efe2a3714f130

    • SHA1

      1641c0c917d6c498775ff9577fb41bdf0cf7c6b2

    • SHA256

      5b084762eda98304bfce1ad32426c4f08a41ad56790547d206b48461c008c118

    • SHA512

      aa394196c3dbb1fd38dc43267ae3a1eda8c9ce5f946beebbb29808ee6c2589d70919af5a3a430c52aca0fe60356c5179c92dbbb5043bb038a1eb376797029e1b

    • SSDEEP

      384:+J5+c5mibCpKAjndr3Vo4G/usaNJawcudoD7UXlOIJquYT:uAcYimoqdm9gnbcuyD7U19m

    Score
    8/10
    defense_evasiondiscoveryevasionupx

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks