Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

b389b582e6...50.exe

windows7-x64

8

b389b582e6...50.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b389b582e661d5bedc2e5d93656e2b9d25ab65b3a0785fac2e560648b439ce50

  • Size

    96KB

  • Sample

    221001-yh59paebgp

  • MD5

    685d0110bbdc8e55dc8340001d5eab9e

  • SHA1

    277b56e9391a4aec627eedd44cf63eb5ce057c3b

  • SHA256

    b389b582e661d5bedc2e5d93656e2b9d25ab65b3a0785fac2e560648b439ce50

  • SHA512

    abf19efd4fecc6ca72ae87265583bdc81e54ad5ee753bf65a264424225b03964dee2969e9bf91e1a09044f3bcc35afa99b32434c83f2f23d5aca9b011e6356c2

  • SSDEEP

    1536:Pg8JY+gwf+JeRjY6hii6L3SSQAUm3jDJNdBb2N3iDMmpjZfDHqfqqfnm:PhJY2+6dTSQeJVS3iDMmlxD4nm

Score
8/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      b389b582e661d5bedc2e5d93656e2b9d25ab65b3a0785fac2e560648b439ce50

    • Size

      96KB

    • MD5

      685d0110bbdc8e55dc8340001d5eab9e

    • SHA1

      277b56e9391a4aec627eedd44cf63eb5ce057c3b

    • SHA256

      b389b582e661d5bedc2e5d93656e2b9d25ab65b3a0785fac2e560648b439ce50

    • SHA512

      abf19efd4fecc6ca72ae87265583bdc81e54ad5ee753bf65a264424225b03964dee2969e9bf91e1a09044f3bcc35afa99b32434c83f2f23d5aca9b011e6356c2

    • SSDEEP

      1536:Pg8JY+gwf+JeRjY6hii6L3SSQAUm3jDJNdBb2N3iDMmpjZfDHqfqqfnm:PhJY2+6dTSQeJVS3iDMmlxD4nm

    Score
    8/10
    adwarepersistencestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks