472dc42f9a13ca003ed7dcefcf3a1ae6d5a66e44d768a61ea765705052074a31 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

472dc42f9a...31.exe

windows7-x64

472dc42f9a...31.exe

windows10-2004-x64

Sharing

General

Target

472dc42f9a13ca003ed7dcefcf3a1ae6d5a66e44d768a61ea765705052074a31
Size

192KB
Sample

240520-1shx9ahe5x
MD5

c88ae64d9c8389fecb55dd5b5d75512b
SHA1

f170cf0b7395a6073e509f5bb642ed7d167f75c6
SHA256

472dc42f9a13ca003ed7dcefcf3a1ae6d5a66e44d768a61ea765705052074a31
SHA512

97091ed5a1807356878f6b07b38381b67247887ff6e0b8591edc74ece89b7a3f5ba3d98542fe94249ccb4d5f87b487eda90f6a4410b2a9b32cc743b775bca2de
SSDEEP

1536:IONACN9um0e2TT4ObwtcGN87KWhn74N3mB/Oe5lQtpnouy8O6Nuf51TQmQM22Owo:bzum0PZbwtlK2hM/fzc5outkTy27zU

Score

10^/10

persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

472dc42f9a13ca003ed7dcefcf3a1ae6d5a66e44d768a61ea765705052074a31.exe

Resource

win7-20240215-en

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

472dc42f9a13ca003ed7dcefcf3a1ae6d5a66e44d768a61ea765705052074a31.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  472dc42f9a13ca003ed7dcefcf3a1ae6d5a66e44d768a61ea765705052074a31
- Size
  
  192KB
- MD5
  
  c88ae64d9c8389fecb55dd5b5d75512b
- SHA1
  
  f170cf0b7395a6073e509f5bb642ed7d167f75c6
- SHA256
  
  472dc42f9a13ca003ed7dcefcf3a1ae6d5a66e44d768a61ea765705052074a31
- SHA512
  
  97091ed5a1807356878f6b07b38381b67247887ff6e0b8591edc74ece89b7a3f5ba3d98542fe94249ccb4d5f87b487eda90f6a4410b2a9b32cc743b775bca2de
- SSDEEP
  
  1536:IONACN9um0e2TT4ObwtcGN87KWhn74N3mB/Oe5lQtpnouy8O6Nuf51TQmQM22Owo:bzum0PZbwtlK2hM/fzc5outkTy27zU
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.