Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

4winkey.exe

windows7-x64

7

4winkey.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4winkey.exe

  • Size

    2.2MB

  • Sample

    230703-sbn4yagh28

  • MD5

    06dbde6d228a2c398276cf4eaf87eac7

  • SHA1

    3431aef99aa6f0f8496e03de73bb33f3a268db29

  • SHA256

    741a3ee4476d812386dcf92b85adef3bd51aed823fa2d7ff87f16d9fee73762a

  • SHA512

    0fe730befb6241e0c6834271dc7235bc12bcbd2b6aa4ce653cfee15f16bafead3c8e43630d6126986672cb406856e4e8cf89a8bded59d1d098b6adb70e2a3c55

  • SSDEEP

    49152:34p0ZTmiu6tWE+Inc21hvSB1FtTIL9lH02I:ISTmj6tDTc21kPybZ

Score
7/10
discoveryupxvmprotect

Malware Config

Targets

    • Target

      4winkey.exe

    • Size

      2.2MB

    • MD5

      06dbde6d228a2c398276cf4eaf87eac7

    • SHA1

      3431aef99aa6f0f8496e03de73bb33f3a268db29

    • SHA256

      741a3ee4476d812386dcf92b85adef3bd51aed823fa2d7ff87f16d9fee73762a

    • SHA512

      0fe730befb6241e0c6834271dc7235bc12bcbd2b6aa4ce653cfee15f16bafead3c8e43630d6126986672cb406856e4e8cf89a8bded59d1d098b6adb70e2a3c55

    • SSDEEP

      49152:34p0ZTmiu6tWE+Inc21hvSB1FtTIL9lH02I:ISTmj6tDTc21kPybZ

    Score
    7/10
    discoveryupxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks