6b1896a9be277061c53fc2f3dee707fc874bbbc51e8f7e178c14089db714b806 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

6b1896a9be...06.exe

windows7-x64

6b1896a9be...06.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

6b1896a9be277061c53fc2f3dee707fc874bbbc51e8f7e178c14089db714b806.exe

Resource

win7-20220901-en

cybergate remote persistence stealer trojan upx

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

6b1896a9be277061c53fc2f3dee707fc874bbbc51e8f7e178c14089db714b806.exe

Resource

win10v2004-20220812-en

cybergate remote persistence stealer trojan upx

windows10-2004-x64

17 signatures

150 seconds

General

Target

6b1896a9be277061c53fc2f3dee707fc874bbbc51e8f7e178c14089db714b806
Size

419KB
MD5

66a6185487658378052a490d162fdeb2
SHA1

b8b2b6028e3cbd03257d244019f9a2141636cb94
SHA256

6b1896a9be277061c53fc2f3dee707fc874bbbc51e8f7e178c14089db714b806
SHA512

c16d7476dce8642097fac2dc51dd9d5505a126b7cc5edb4d1ad98b2e0d5e4f53bdb251ed5e9c618d58d06e7fda49dcb5ac1826996ee013ef9948b4d7d0e1da55
SSDEEP

6144:rp6Ec/ijZ5W9RAI1MMjHUH5DrNAv/qpNSY1Zq3/TPj5Ntb7SAiEPJ0Oonfc5Dj8Y:MEoij4R1MML8C/qphi/TNi+J0XfM

Score

N/A

Malware Config

Signatures

Files

6b1896a9be277061c53fc2f3dee707fc874bbbc51e8f7e178c14089db714b806
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 374KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.