b6c24d2322531ac2eb87a9ba067dcfaa9231d6332950a83b9e0cd2f9705be077 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

b6c24d2322...77.exe

windows7-x64

b6c24d2322...77.exe

windows10-2004-x64

Sharing

General

Target

b6c24d2322531ac2eb87a9ba067dcfaa9231d6332950a83b9e0cd2f9705be077
Size

268KB
Sample

221202-zfvkvacb96
MD5

9533b0fa5939a68f2a0a43463e139913
SHA1

85a1a86a18ecfc0919992a6b445cc9afdaf328e3
SHA256

b6c24d2322531ac2eb87a9ba067dcfaa9231d6332950a83b9e0cd2f9705be077
SHA512

b66b30476288e6655a18c984331ee5b0aadad6082767b5ca3565d32787b34b38eb08c16e217f4918acc9adea58145e93d21de210992b9a37576d6293d43b31d0
SSDEEP

3072:EoJUAqlBaEBx/pHXqv1KkZLE5UPC1NnaQ2D6czNZfMP3zFgpeBOyChpDvAcM6j:EztlsE5m/9PD6vgpGw7vhM6j

Score

10^/10

evasion persistence upx

Static task

static1

Behavioral task

behavioral1

Sample

b6c24d2322531ac2eb87a9ba067dcfaa9231d6332950a83b9e0cd2f9705be077.exe

Resource

win7-20220901-en

evasion persistence upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

b6c24d2322531ac2eb87a9ba067dcfaa9231d6332950a83b9e0cd2f9705be077.exe

Resource

win10v2004-20220812-en

evasion persistence upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  b6c24d2322531ac2eb87a9ba067dcfaa9231d6332950a83b9e0cd2f9705be077
- Size
  
  268KB
- MD5
  
  9533b0fa5939a68f2a0a43463e139913
- SHA1
  
  85a1a86a18ecfc0919992a6b445cc9afdaf328e3
- SHA256
  
  b6c24d2322531ac2eb87a9ba067dcfaa9231d6332950a83b9e0cd2f9705be077
- SHA512
  
  b66b30476288e6655a18c984331ee5b0aadad6082767b5ca3565d32787b34b38eb08c16e217f4918acc9adea58145e93d21de210992b9a37576d6293d43b31d0
- SSDEEP
  
  3072:EoJUAqlBaEBx/pHXqv1KkZLE5UPC1NnaQ2D6czNZfMP3zFgpeBOyChpDvAcM6j:EztlsE5m/9PD6vgpGw7vhM6j
Score

10^/10

evasion persistence upx
- Modifies firewall policy service
  evasion
- Modifies Installed Components in the registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx

© 2018-2025

Terms | Privacy