56c2c75f3eae96708ce3b0f8c0d98e48827e826eec0df30b83594968b4ffbf21 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

56c2c75f3e...21.exe

windows7-x64

3

56c2c75f3e...21.exe

windows10-2004-x64

8

Sharing

General

Target

56c2c75f3eae96708ce3b0f8c0d98e48827e826eec0df30b83594968b4ffbf21
Size

190KB
Sample

221127-ffs78sed21
MD5

fb0bffa32a19ea8f4819e80d1001bebf
SHA1

483db4b488f2ba09a487c88a8e0c14802d18f54a
SHA256

56c2c75f3eae96708ce3b0f8c0d98e48827e826eec0df30b83594968b4ffbf21
SHA512

2b711a3c97f95af7d9edf8617650ce8c8364de50b4938e9e87bd4d47a4e2ee3e66053f88ea50b6a8e99c95da445b5e021d956e6580daf9865dde4ad42c558c9b
SSDEEP

3072:1pzRNYuluupWyvbOijh7UAoaI52pySvl3nW0CWcscGF8ZHmt4qyluHE:1ZRvupm9UX5WflXW5Wc88wGXluk

Score

8^/10

evasion trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

56c2c75f3eae96708ce3b0f8c0d98e48827e826eec0df30b83594968b4ffbf21.exe

Resource

win7-20220901-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

56c2c75f3eae96708ce3b0f8c0d98e48827e826eec0df30b83594968b4ffbf21.exe

Resource

win10v2004-20220812-en

evasion trojan upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  56c2c75f3eae96708ce3b0f8c0d98e48827e826eec0df30b83594968b4ffbf21
- Size
  
  190KB
- MD5
  
  fb0bffa32a19ea8f4819e80d1001bebf
- SHA1
  
  483db4b488f2ba09a487c88a8e0c14802d18f54a
- SHA256
  
  56c2c75f3eae96708ce3b0f8c0d98e48827e826eec0df30b83594968b4ffbf21
- SHA512
  
  2b711a3c97f95af7d9edf8617650ce8c8364de50b4938e9e87bd4d47a4e2ee3e66053f88ea50b6a8e99c95da445b5e021d956e6580daf9865dde4ad42c558c9b
- SSDEEP
  
  3072:1pzRNYuluupWyvbOijh7UAoaI52pySvl3nW0CWcscGF8ZHmt4qyluHE:1ZRvupm9UX5WflXW5Wc88wGXluk
Score

8^/10

evasion trojan upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasiontrojanupx

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.