940057ae2dd2e1532eebfd06c07b3c50344f27922692479076e267443a9edc17 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

087f743efe...0N.exe

windows7-x64

8

087f743efe...0N.exe

windows10-2004-x64

8

Sharing

General

Target

087f743efe2e8420ab817c555a232e50N.exe
Size

678KB
Sample

240706-pvc91ayckn
MD5

087f743efe2e8420ab817c555a232e50
SHA1

a40fc725d117ae3350474615869e1de83f2ea09b
SHA256

940057ae2dd2e1532eebfd06c07b3c50344f27922692479076e267443a9edc17
SHA512

31623e2d8414a1596c23cbd9fd82d6f9e5bf5ab981351de67b1d4c49131420dadee851300953dcb986b4b27f23fd2320afb21b8c805983266a4601833e900002
SSDEEP

12288:7tKe6Zv23YLVFhBsC8iFHs+hsuQXIQVRpVnl3Bg5oiNaYzHvAR8:v6Zv2ivhBVnFvh5Q44+iiUKIa

Score

8^/10

persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

087f743efe2e8420ab817c555a232e50N.exe

Resource

win7-20240704-en

persistence upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

087f743efe2e8420ab817c555a232e50N.exe

Resource

win10v2004-20240704-en

persistence upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  087f743efe2e8420ab817c555a232e50N.exe
- Size
  
  678KB
- MD5
  
  087f743efe2e8420ab817c555a232e50
- SHA1
  
  a40fc725d117ae3350474615869e1de83f2ea09b
- SHA256
  
  940057ae2dd2e1532eebfd06c07b3c50344f27922692479076e267443a9edc17
- SHA512
  
  31623e2d8414a1596c23cbd9fd82d6f9e5bf5ab981351de67b1d4c49131420dadee851300953dcb986b4b27f23fd2320afb21b8c805983266a4601833e900002
- SSDEEP
  
  12288:7tKe6Zv23YLVFhBsC8iFHs+hsuQXIQVRpVnl3Bg5oiNaYzHvAR8:v6Zv2ivhBVnFvh5Q44+iiUKIa
Score

8^/10

persistence upx
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.