4b4069bc462e10031185e70d3a9fad2a266e708e1f2d55d3890e7442b0e2344f | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

ea0cf0a560...JC.exe

windows7-x64

7

ea0cf0a560...JC.exe

windows10-2004-x64

7

Sharing

General

Target

ea0cf0a560a8c73d543e3dc2c0be0746_JC.exe
Size

476KB
Sample

231012-seepnsfa9y
MD5

ea0cf0a560a8c73d543e3dc2c0be0746
SHA1

c680dfd744d3537844193b611777c8f5ba5ac387
SHA256

4b4069bc462e10031185e70d3a9fad2a266e708e1f2d55d3890e7442b0e2344f
SHA512

305e5fe3028598ce67a451526866d6e1fcd85da4acdb697a38914abce3b44e3f1787c82b49cc2bcfaddf920b5e15f413d287be9e5a9993f69a686b11134d7a4d
SSDEEP

6144:WdspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70Nqr:s8kxNhOZElO5kkWjhD4AI

Score

7^/10

persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ea0cf0a560a8c73d543e3dc2c0be0746_JC.exe

Resource

win7-20230831-en

persistence upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

ea0cf0a560a8c73d543e3dc2c0be0746_JC.exe

Resource

win10v2004-20230915-en

persistence upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  ea0cf0a560a8c73d543e3dc2c0be0746_JC.exe
- Size
  
  476KB
- MD5
  
  ea0cf0a560a8c73d543e3dc2c0be0746
- SHA1
  
  c680dfd744d3537844193b611777c8f5ba5ac387
- SHA256
  
  4b4069bc462e10031185e70d3a9fad2a266e708e1f2d55d3890e7442b0e2344f
- SHA512
  
  305e5fe3028598ce67a451526866d6e1fcd85da4acdb697a38914abce3b44e3f1787c82b49cc2bcfaddf920b5e15f413d287be9e5a9993f69a686b11134d7a4d
- SSDEEP
  
  6144:WdspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70Nqr:s8kxNhOZElO5kkWjhD4AI
Score

7^/10

persistence upx
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.