1d0128fd3184a765076397dd308e51bbc578a3639cb9c08ab6b5c36704d772b4

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

013e80dc8e...a8.exe

windows7-x64

040677c072...cc.exe

windows7-x64

0ba3a15c5f...6a.exe

windows7-x64

19d029dd80...b2.dll

windows7-x64

1ac4f94c2d...83.exe

windows7-x64

1efeb07862...bb.dll

windows7-x64

27861dacdd...03.exe

windows7-x64

31860041f6...ff.exe

windows7-x64

3c49ffd8bf...86.dll

windows7-x64

41edb742c1...45.exe

windows7-x64

4ad4c837ce...e1.exe

windows7-x64

50682871a2...53.exe

windows7-x64

5f3bfe76bb...b6.exe

windows7-x64

784f3902fd...12.exe

windows7-x64

816c0e4deb...6c.exe

windows7-x64

81b49d3c61...a9.exe

windows7-x64

82d1e979d2...67.exe

windows7-x64

8ba3f20419...4f.exe

windows7-x64

8d8576432c...fe.exe

windows7-x64

962bbb1929...e2.exe

windows7-x64

96f295d08c...d1.exe

windows7-x64

96f2bcea04...28.exe

windows7-x64

9972304b5c...64.exe

windows7-x64

9ff988d7ea...09.exe

windows7-x64

bfddb59433...b0.exe

windows7-x64

c0ca77690a...a5.dll

windows7-x64

cb0f8c9180...69.exe

windows7-x64

cfbcc54f36...29.exe

windows7-x64

dd0f55e997...a3.exe

windows7-x64

ded033da36...58.exe

windows7-x64

ea55e146fe...59.exe

windows7-x64

fffd0cdd49...d6.exe

windows7-x64

Resubmissions

14/11/2023, 17:31

14/11/2023, 17:21

28/10/2023, 19:29

24/10/2023, 13:29

18/10/2023, 12:04

07/09/2023, 12:10

Analysis

max time kernel
13s
max time network
19s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
07/09/2023, 12:10

Sharing

Copy URL

Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

013e80dc8e53bd7d98dd94915f05563499b6a323df343bb765a1d3f188753aa8.exe

Resource

win7-20230831-en

upx

windows7-x64

1 signatures

30 seconds

Behavioral task

behavioral2

Sample

040677c072d3f39edc3d3ec5f95573c1532875c1d57ddc1b62ce396afae016cc.exe

Resource

win7-20230831-en

windows7-x64

4 signatures

30 seconds

Behavioral task

behavioral3

Sample

0ba3a15c5f29bca02e4b54f3146092558841962e5ee66a87218f130a4dfec36a.exe

Resource

win7-20230831-en

xtremerat persistence rat spyware upx

windows7-x64

10 signatures

30 seconds

Behavioral task

behavioral4

Sample

19d029dd80a0823d4abe2dfea87b17935844142cb0921eb35a390f70d5f522b2.dll

Resource

win7-20230831-en

wannacry ransomware worm

windows7-x64

6 signatures

30 seconds

Behavioral task

behavioral5

Sample

1ac4f94c2d34dbf38aaf1b7b7103349479fbe5b427e45fd213d4f31845958b83.exe

Resource

win7-20230831-en

vmprotect

windows7-x64

3 signatures

30 seconds

Behavioral task

behavioral6

Sample

1efeb078625478129da10c0e62b0c842e54286312fbb55c38187bda4d78974bb.dll

Resource

win7-20230831-en

windows7-x64

2 signatures

30 seconds

Behavioral task

behavioral7

Sample

27861dacdddfebc6862f96085da5ede9249b76bdb4b7af16371c51caee417503.exe

Resource

win7-20230831-en

troldesh discovery persistence ransomware trojan upx

windows7-x64

7 signatures

30 seconds

Behavioral task

behavioral8

Sample

31860041f633899f97e48bcd189a406bdc37d6be297b3dd6431f446aff2852ff.exe

Resource

win7-20230831-en

windows7-x64

2 signatures

30 seconds

Behavioral task

behavioral9

Sample

3c49ffd8bfdcc42aee16d8679893aa28f3ed5e433dcf0900ed32f7a88da3f386.dll

Resource

win7-20230831-en

windows7-x64

1 signatures

30 seconds

Behavioral task

behavioral10

Sample

41edb742c1b69881657a48b74568410eb0dc7bfc9f540ab15c4ed0a665d97d45.exe

Resource

win7-20230831-en

persistence

windows7-x64

4 signatures

30 seconds

Behavioral task

behavioral11

Sample

4ad4c837ce02e146680abb4f673fbca2d5f8588f4ae2c766b393c2b4141a9ee1.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

30 seconds

Behavioral task

behavioral12

Sample

50682871a2a335d7c5f89cfc1ed16bec99abfa7856a05f54477ee639bbbfd453.exe

Resource

win7-20230831-en

persistence

windows7-x64

2 signatures

30 seconds

Behavioral task

behavioral13

Sample

5f3bfe76bbd22dd8fd936b3833220ba03964b08e28ecf13dafdbbae24a620cb6.exe

Resource

win7-20230831-en

ramnit banker evasion persistence spyware stealer trojan upx worm

windows7-x64

14 signatures

30 seconds

Behavioral task

behavioral14

Sample

784f3902fdf296683a82c32aba987fd4c12bbed74a6300582da2d53e23954112.exe

Resource

win7-20230831-en

nanocore keylogger persistence spyware stealer trojan

windows7-x64

12 signatures

30 seconds

Behavioral task

behavioral15

Sample

816c0e4debc58580e62e0698d31111436c8f99bd895ad2b4d0c9b7c2798dd96c.exe

Resource

win7-20230831-en

upx

windows7-x64

3 signatures

30 seconds

Behavioral task

behavioral16

Sample

81b49d3c6151419a242ba8491dff24bc345ba1dc696ff9c6aaf3c698bacefea9.exe

Resource

win7-20230831-en

djvu discovery persistence ransomware

windows7-x64

9 signatures

30 seconds

Behavioral task

behavioral17

Sample

82d1e979d2e673d0b1a47d34c1c968582185e284e0532ed66fd69d0e21063c67.exe

Resource

win7-20230831-en

upx

windows7-x64

3 signatures

30 seconds

Behavioral task

behavioral18

Sample

8ba3f20419e36946e978e69ae892805569a3b8e5ae702038065296aae8dc414f.exe

Resource

win7-20230831-en

cybergate 1112 persistence stealer trojan upx

windows7-x64

15 signatures

30 seconds

Behavioral task

behavioral19

Sample

8d8576432cd79c4c6a8902e9fcbdad16c871afae3731a4d9ec9cb6a0be727ffe.exe

Resource

win7-20230831-en

windows7-x64

3 signatures

30 seconds

Behavioral task

behavioral20

Sample

962bbb1929620dc69e35d52ce7e9684412e16e8ad2727222dbe3e47e9220f8e2.exe

Resource

win7-20230831-en

quasar osu persistence spyware trojan

windows7-x64

11 signatures

30 seconds

Behavioral task

behavioral21

Sample

96f295d08c64e21aa847dcff5d942dd2beec65fa4957a6690ee2b7b79382cdd1.exe

Resource

win7-20230831-en

persistence

windows7-x64

4 signatures

30 seconds

Behavioral task

behavioral22

Sample

96f2bcea04abecb6ba4e87bb6cd62beb439882a9bb013fa12def110ea3335528.exe

Resource

win7-20230831-en

neshta persistence spyware stealer

windows7-x64

11 signatures

30 seconds

Behavioral task

behavioral23

Sample

9972304b5cf97f0369e5b287583931d87dfe984aa698c9123b7061379db68e64.exe

Resource

win7-20230831-en

persistence

windows7-x64

11 signatures

30 seconds

Behavioral task

behavioral24

Sample

9ff988d7ea76e8379b5da6af3455b859957e7dfe572181041c35b10390780909.exe

Resource

win7-20230831-en

persistence

windows7-x64

4 signatures

30 seconds

Behavioral task

behavioral25

Sample

bfddb59433bec29faf6210449f73503f38e61234c09be3f405be8196d9d6f8b0.exe

Resource

win7-20230831-en

windows7-x64

5 signatures

30 seconds

Behavioral task

behavioral26

Sample

c0ca77690ad65d797c3c9a662229046b0cc28e89ca54e0e39c70f656201280a5.dll

Resource

win7-20230831-en

windows7-x64

2 signatures

30 seconds

Behavioral task

behavioral27

Sample

cb0f8c9180b92b75f130ecdd9fd42fa9c687796313cc968179d1c9b217c65e69.exe

Resource

win7-20230831-en

gh0strat persistence rat

windows7-x64

6 signatures

30 seconds

Behavioral task

behavioral28

Sample

cfbcc54f36dbdfc8d78d2be3a6b565f4e25b4d52f51de10ad7e4ca14c7f55d29.exe

Resource

win7-20230831-en

windows7-x64

4 signatures

30 seconds

Behavioral task

behavioral29

Sample

dd0f55e997999bfddd040f676fd616b99afe386daf1a69c3a02a8324274baba3.exe

Resource

win7-20230831-en

evasion persistence

windows7-x64

9 signatures

30 seconds

Behavioral task

behavioral30

Sample

ded033da36fbf8287d0df6f21a0339b6e1046ce678b46e7cd558f63e22df1158.exe

Resource

win7-20230831-en

windows7-x64

5 signatures

30 seconds

Behavioral task

behavioral31

Sample

ea55e146fed653416bd40c92ce89cd61b46035c7bc6f55a33c71a9872e2c9659.exe

Resource

win7-20230831-en

nanocore evasion keylogger persistence spyware stealer trojan

windows7-x64

13 signatures

30 seconds

Behavioral task

behavioral32

Sample

fffd0cdd4935b9fa1ff5530a94ec648346d5f6c6521fc07641fd9254f5ef75d6.exe

Resource

win7-20230831-en

aspackv2 persistence

windows7-x64

14 signatures

30 seconds

Report Analysis Logs

General

Target

013e80dc8e53bd7d98dd94915f05563499b6a323df343bb765a1d3f188753aa8.exe
Size

153KB
MD5

7014c96f6c8951c5b5fe7902c33e9d05
SHA1

ad2c032bd59263aa8ea56c3f9a414213841c9a93
SHA256

013e80dc8e53bd7d98dd94915f05563499b6a323df343bb765a1d3f188753aa8
SHA512

34c61f13d0bcf00faccf5aab35ac0b3bb7097621fd6eea3497262b3a33ef61d02995f3839abfb0e619cce2e4ffe7b536fadb1fe6b01d29ffdb3e9a8274714f92
SSDEEP

3072:nvbZhfzC3YfisNt6+Qpd+aPpKozLEM+gBsiVcUD8Bs/YXr+fbhGIRL:nvLfm3psaZpIqBsiQBNrws

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2588-0-0x0000000000400000-0x0000000000435000-memory.dmp	upx

Processes

C:\Users\Admin\AppData\Local\Temp\013e80dc8e53bd7d98dd94915f05563499b6a323df343bb765a1d3f188753aa8.exe
"C:\Users\Admin\AppData\Local\Temp\013e80dc8e53bd7d98dd94915f05563499b6a323df343bb765a1d3f188753aa8.exe"
1⤵
PID:2588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2588-0-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download
memory/2588-1-0x0000000000220000-0x0000000000228000-memory.dmp

Filesize
32KB

Download
memory/2588-2-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download
memory/2588-3-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download