Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

MobaXterm backup.zip

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MobaXterm backup.zip

  • Size

    1KB

  • Sample

    230807-zv2byaag9z

  • MD5

    c1bc17c5a7f82033b1b2745e0c67c701

  • SHA1

    2458ec28c8344883a68ea5f96f1a3822c6f1f88c

  • SHA256

    5bc8c937fbac388e1a7cad9a2687ea75bc1b7317076e49f1052e46b08b9eab69

  • SHA512

    69cc06992459942314cee41c06876fb9b7aef55d20a3e45ca4b0ae2ea46f3f364b329316e71bf92d9542e648911fe69627641f3b1b9838ff88b2b07e5f5c35e4

Score
7/10
persistencepyinstallerupx

Malware Config

Targets

    • Target

      MobaXterm backup.zip

    • Size

      1KB

    • MD5

      c1bc17c5a7f82033b1b2745e0c67c701

    • SHA1

      2458ec28c8344883a68ea5f96f1a3822c6f1f88c

    • SHA256

      5bc8c937fbac388e1a7cad9a2687ea75bc1b7317076e49f1052e46b08b9eab69

    • SHA512

      69cc06992459942314cee41c06876fb9b7aef55d20a3e45ca4b0ae2ea46f3f364b329316e71bf92d9542e648911fe69627641f3b1b9838ff88b2b07e5f5c35e4

    Score
    7/10
    persistencepyinstallerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks