Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Built.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Built.exe

  • Size

    6.2MB

  • Sample

    240101-sw9w5sdbfq

  • MD5

    50988b63ff85acdb5956b38a05096378

  • SHA1

    d9e14e4871218abc7144fb0d7b1a9cafd178d83e

  • SHA256

    392525f4166157cec65b28c8fcc84212b17dbd859d50bd4f5f852c9c9c01b4c5

  • SHA512

    6dbe20a6fb8ef33fa64b1cc266fd2468ea6f15cfac9e18f677a5a507d213b41c236107117810fcccfd65737ca538f2d1a376bf5e85e5fa9c5365bd322baf773f

  • SSDEEP

    98304:URVEtdFBgyMAamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4R1BM2h3Bs38:USFyBeN/FJMIDJf0gsAGK4R1u2M38

Score
10/10
blankgrabberevasionupx

Malware Config

Targets

    • Target

      Built.exe

    • Size

      6.2MB

    • MD5

      50988b63ff85acdb5956b38a05096378

    • SHA1

      d9e14e4871218abc7144fb0d7b1a9cafd178d83e

    • SHA256

      392525f4166157cec65b28c8fcc84212b17dbd859d50bd4f5f852c9c9c01b4c5

    • SHA512

      6dbe20a6fb8ef33fa64b1cc266fd2468ea6f15cfac9e18f677a5a507d213b41c236107117810fcccfd65737ca538f2d1a376bf5e85e5fa9c5365bd322baf773f

    • SSDEEP

      98304:URVEtdFBgyMAamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4R1BM2h3Bs38:USFyBeN/FJMIDJf0gsAGK4R1u2M38

    Score
    10/10
    evasionupx

    • Deletes Windows Defender Definitions

      Uses mpcmdrun utility to delete all AV definitions.

      evasion

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks