a0c2ca51c7d65d7615fe8b7318baf7d50bdb4fc161ee05845f8686cd41c752f2 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

8

a0c2ca51c7...f2.exe

windows7-x64

a0c2ca51c7...f2.exe

windows10-2004-x64

Sharing

General

Target

a0c2ca51c7d65d7615fe8b7318baf7d50bdb4fc161ee05845f8686cd41c752f2
Size

1.4MB
Sample

221204-gvy8gagf9v
MD5

e32c4fbd28f2b996a5a7bbde62f48ce9
SHA1

a027c853489fb726f8f2f7286d20f3f1f3f67e94
SHA256

a0c2ca51c7d65d7615fe8b7318baf7d50bdb4fc161ee05845f8686cd41c752f2
SHA512

ae5ccd8f07857143fd88d98fec86458c2874992a70ed3482d56c81ac101bb370a21fb2b8d5c4256c87b222ac26fd8e00a1c3534452fd3dcce590e81817e0293c
SSDEEP

24576:nk3lFVBIRSEuzT5aDtcANt9aZ+/JiCXNRDE6mbSy1IndkZVrR8iTH5jaGjSuQ+VJ:k1XBIRSfHANtN7yKndkNf5jaGjw+VK6P

Score

10^/10

evasion persistence trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a0c2ca51c7d65d7615fe8b7318baf7d50bdb4fc161ee05845f8686cd41c752f2.exe

Resource

win7-20220812-en

evasion persistence trojan upx

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

a0c2ca51c7d65d7615fe8b7318baf7d50bdb4fc161ee05845f8686cd41c752f2.exe

Resource

win10v2004-20220812-en

evasion persistence trojan upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  a0c2ca51c7d65d7615fe8b7318baf7d50bdb4fc161ee05845f8686cd41c752f2
- Size
  
  1.4MB
- MD5
  
  e32c4fbd28f2b996a5a7bbde62f48ce9
- SHA1
  
  a027c853489fb726f8f2f7286d20f3f1f3f67e94
- SHA256
  
  a0c2ca51c7d65d7615fe8b7318baf7d50bdb4fc161ee05845f8686cd41c752f2
- SHA512
  
  ae5ccd8f07857143fd88d98fec86458c2874992a70ed3482d56c81ac101bb370a21fb2b8d5c4256c87b222ac26fd8e00a1c3534452fd3dcce590e81817e0293c
- SSDEEP
  
  24576:nk3lFVBIRSEuzT5aDtcANt9aZ+/JiCXNRDE6mbSy1IndkZVrR8iTH5jaGjSuQ+VJ:k1XBIRSfHANtN7yKndkNf5jaGjw+VK6P
Score

10^/10

evasion persistence trojan upx
- UAC bypass
  evasion trojan
- Drops file in Drivers directory
- Sets service image path in registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojanupx

behavioral2

evasionpersistencetrojanupx

© 2018-2025

Terms | Privacy