Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

f02df4b8df...cb.exe

windows7-x64

8

f02df4b8df...cb.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f02df4b8df3920cade147880112ef58a20417bec2bcf8d4412b4e9581b2d29cb

  • Size

    448KB

  • Sample

    221204-n65b7afh47

  • MD5

    37c01c203c0024f88fe4e3c9dec2a345

  • SHA1

    1f18fb8d2fe740c4ebf401d1516e17691bcba58c

  • SHA256

    f02df4b8df3920cade147880112ef58a20417bec2bcf8d4412b4e9581b2d29cb

  • SHA512

    4ded981dd9006f489a0adceb3b63e4fce817b0d595320a5a316d6a4e32d749d8bff4db7045d408fb82641831eac9ad70ddb95d1502a79a0be0777642dedb312b

  • SSDEEP

    12288:IKvtGJqHXFlOPH4NTdBMOPFu6z/bqaWZAI:I2tGJqL24NTnMXSBWZAI

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      f02df4b8df3920cade147880112ef58a20417bec2bcf8d4412b4e9581b2d29cb

    • Size

      448KB

    • MD5

      37c01c203c0024f88fe4e3c9dec2a345

    • SHA1

      1f18fb8d2fe740c4ebf401d1516e17691bcba58c

    • SHA256

      f02df4b8df3920cade147880112ef58a20417bec2bcf8d4412b4e9581b2d29cb

    • SHA512

      4ded981dd9006f489a0adceb3b63e4fce817b0d595320a5a316d6a4e32d749d8bff4db7045d408fb82641831eac9ad70ddb95d1502a79a0be0777642dedb312b

    • SSDEEP

      12288:IKvtGJqHXFlOPH4NTdBMOPFu6z/bqaWZAI:I2tGJqL24NTnMXSBWZAI

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks