Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

cf30a65b6b...a5.exe

windows7-x64

8

cf30a65b6b...a5.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf30a65b6be9b46075d3736d9214ffa593aa92ae9fbf9048c57bbc43820abba5

  • Size

    232KB

  • Sample

    240915-b78psazapl

  • MD5

    166772cdee46493833ac6a6df1bcf7e4

  • SHA1

    edba91c6fc5474a373182c02173c67b0f508b4f6

  • SHA256

    cf30a65b6be9b46075d3736d9214ffa593aa92ae9fbf9048c57bbc43820abba5

  • SHA512

    623911f1b2975b3eaf35493e6ad9f29150e969480bf12878853a2daae2506e19bb536bcbd6e8b299577f0c25ca539cf0f4375e34eea110974b21060fb932022a

  • SSDEEP

    3072:R1i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1VOz1i/NU82OMYcYU:ji/NjO5xbg/CSUFLTwMjs6oi/N+O7

Score
8/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      cf30a65b6be9b46075d3736d9214ffa593aa92ae9fbf9048c57bbc43820abba5

    • Size

      232KB

    • MD5

      166772cdee46493833ac6a6df1bcf7e4

    • SHA1

      edba91c6fc5474a373182c02173c67b0f508b4f6

    • SHA256

      cf30a65b6be9b46075d3736d9214ffa593aa92ae9fbf9048c57bbc43820abba5

    • SHA512

      623911f1b2975b3eaf35493e6ad9f29150e969480bf12878853a2daae2506e19bb536bcbd6e8b299577f0c25ca539cf0f4375e34eea110974b21060fb932022a

    • SSDEEP

      3072:R1i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1VOz1i/NU82OMYcYU:ji/NjO5xbg/CSUFLTwMjs6oi/N+O7

    Score
    8/10
    defense_evasiondiscoverypersistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks