Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

d7c554e6be...7e.exe

windows7-x64

8

d7c554e6be...7e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7c554e6be24b8e353b89ea2441c46a0468ff4f4fb54ace3b039484de3cf957e

  • Size

    161KB

  • Sample

    221206-s154radh8s

  • MD5

    59a50fc74408a0c6a8016dce13e585a5

  • SHA1

    16793487424807c3ae7b6218b9cf5effff141e6e

  • SHA256

    d7c554e6be24b8e353b89ea2441c46a0468ff4f4fb54ace3b039484de3cf957e

  • SHA512

    16ddfccd03853a720ca66e9f89090b80076466d85e5391c132bf747ef0e4091c5554ae4987d014ac11f7f9f9668b4d6171f709da5733e08387339764e3477d23

  • SSDEEP

    3072:1HIENA6jJVHO585ZI/0gPQLUmTw4Pf/W8WzQJJ5oziS:ym9VHQWgPQL1rne86kJ5S

Score
8/10
adwarestealerupx

Malware Config

Targets

    • Target

      d7c554e6be24b8e353b89ea2441c46a0468ff4f4fb54ace3b039484de3cf957e

    • Size

      161KB

    • MD5

      59a50fc74408a0c6a8016dce13e585a5

    • SHA1

      16793487424807c3ae7b6218b9cf5effff141e6e

    • SHA256

      d7c554e6be24b8e353b89ea2441c46a0468ff4f4fb54ace3b039484de3cf957e

    • SHA512

      16ddfccd03853a720ca66e9f89090b80076466d85e5391c132bf747ef0e4091c5554ae4987d014ac11f7f9f9668b4d6171f709da5733e08387339764e3477d23

    • SSDEEP

      3072:1HIENA6jJVHO585ZI/0gPQLUmTw4Pf/W8WzQJJ5oziS:ym9VHQWgPQL1rne86kJ5S

    Score
    8/10
    adwarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks