Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

sqlyog_MfbFy-1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sqlyog_MfbFy-1.exe

  • Size

    1.7MB

  • Sample

    230930-ck2hmahd73

  • MD5

    4e0ddcbac69d0f9fafa52486e2b58460

  • SHA1

    4b2f2e57406be4ef044965d758440b879696900e

  • SHA256

    0ce151b0d9d7cdfa5356212fbed8f0b57534e553f17acdd61306a599b7db3602

  • SHA512

    a94c139fd1e8d43d0975ce6a1ce4f3696dd61232a56f0e2bc629723539aad263a8d29d81f4cb173912eebb2f2fa1fe1208524d4ed14e44d7d73e861494f87a34

  • SSDEEP

    24576:x4nXubIQGyxbPV0db26W8ODmac/uOmU+g4v/GGfx1FqjyxKzMOnwY2Aznpf9DUvl:xqe3f6gc/u3Ucv1IjCKzM7id9DqR

Score
8/10
discoveryupx

Malware Config

Targets

    • Target

      sqlyog_MfbFy-1.exe

    • Size

      1.7MB

    • MD5

      4e0ddcbac69d0f9fafa52486e2b58460

    • SHA1

      4b2f2e57406be4ef044965d758440b879696900e

    • SHA256

      0ce151b0d9d7cdfa5356212fbed8f0b57534e553f17acdd61306a599b7db3602

    • SHA512

      a94c139fd1e8d43d0975ce6a1ce4f3696dd61232a56f0e2bc629723539aad263a8d29d81f4cb173912eebb2f2fa1fe1208524d4ed14e44d7d73e861494f87a34

    • SSDEEP

      24576:x4nXubIQGyxbPV0db26W8ODmac/uOmU+g4v/GGfx1FqjyxKzMOnwY2Aznpf9DUvl:xqe3f6gc/u3Ucv1IjCKzM7id9DqR

    Score
    8/10
    discoveryupx

    • Downloads MZ/PE file

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks for any installed AV software in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks