00c54a66734dc2d982767451c957e251dcb85d0bf594cde05d23a4079a83dfca | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

00c54a6673...ca.exe

windows7-x64

8

00c54a6673...ca.exe

windows10-2004-x64

8

Sharing

General

Target

00c54a66734dc2d982767451c957e251dcb85d0bf594cde05d23a4079a83dfca
Size

416KB
Sample

221019-tt1fcsfef5
MD5

827ac41e1c88869a611420074b7ef735
SHA1

7c3287eaf21c5df3bdaed00544079b3584e03381
SHA256

00c54a66734dc2d982767451c957e251dcb85d0bf594cde05d23a4079a83dfca
SHA512

47a1ddb491e4bd2ab50118d3fd7078e4a621e59c9a4b796bd5748d0a12199b8d8bb9ab5cdd1671ff6de6cf16f783244ccb11f806c9d136e86e9ec7ec400ff637
SSDEEP

12288:hxG8wgVFzxyQfwLVmuDqE871hkgQuoWiM/lM0v/C:hrnFzUKwxmmc7HQfe/lM03C

Score

8^/10

persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

00c54a66734dc2d982767451c957e251dcb85d0bf594cde05d23a4079a83dfca.exe

Resource

win7-20220901-en

persistence upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

00c54a66734dc2d982767451c957e251dcb85d0bf594cde05d23a4079a83dfca.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  00c54a66734dc2d982767451c957e251dcb85d0bf594cde05d23a4079a83dfca
- Size
  
  416KB
- MD5
  
  827ac41e1c88869a611420074b7ef735
- SHA1
  
  7c3287eaf21c5df3bdaed00544079b3584e03381
- SHA256
  
  00c54a66734dc2d982767451c957e251dcb85d0bf594cde05d23a4079a83dfca
- SHA512
  
  47a1ddb491e4bd2ab50118d3fd7078e4a621e59c9a4b796bd5748d0a12199b8d8bb9ab5cdd1671ff6de6cf16f783244ccb11f806c9d136e86e9ec7ec400ff637
- SSDEEP
  
  12288:hxG8wgVFzxyQfwLVmuDqE871hkgQuoWiM/lM0v/C:hrnFzUKwxmmc7HQfe/lM03C
Score

8^/10

persistence upx
- Adds policy Run key to start application
  persistence
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy