Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

invoice# 4816959.exe

windows7-x64

7

invoice# 4816959.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4258b0d3dffe0692536638fe27841906c50f0144dee4dcb2ebe62c44b20408fd

  • Size

    759KB

  • Sample

    240913-cb9gwaxgpm

  • MD5

    1cf8f4d27569653329da095e46c0e8ad

  • SHA1

    fc7c85080d5688104b8af819d7f6ec64b618d642

  • SHA256

    4258b0d3dffe0692536638fe27841906c50f0144dee4dcb2ebe62c44b20408fd

  • SHA512

    d816030fc5d13059a4d4a9a7d72fa6020fdf770d8289ec5140980e4504250e890b4a92212ce5a1be62ecc1759922f514cdad3bccf40891cb2354ac302ecb433d

  • SSDEEP

    12288:iMEdfth8qiCyGYQygpXQHnIrn80JwtT9S1BFDUhHK9hQfWr0PSU2epDsRXAB98WE:DEdfteqXyXQTeHIr88qT9IFDtrQfVPF2

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      invoice# 4816959.exe

    • Size

      785KB

    • MD5

      96f1b2e33db06bce963989fa8a1d6a05

    • SHA1

      dc157dd6283a01887f07774ac6971b4d173dcbd1

    • SHA256

      f216ee2de45ead0b027d4ee0c033a14ca22c1ad6aed2917958b8a9121522d5ef

    • SHA512

      432abd26a6c8464e03086123efd7dd407f428774f90aafe463ff8a6a90c9988b44bab6ff7220c89f1d352b2cc78a5b342327e582c580201bf6c611f066ada365

    • SSDEEP

      24576:M4GHnhIzOaWuTWrpVr2f9P78+q1SBGWZbJb2tk:LshdabTkEfxRqsBnVSt

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks