e99234362a42f0fa1010f345ef0ae37d467c37283613c97b2e93fd6faf3143dd | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

7

608baf2768...0N.exe

windows7-x64

7

608baf2768...0N.exe

windows10-2004-x64

Sharing

General

Target

608baf276843388a72352e8644e2f780N.exe
Size

41KB
Sample

240715-clsxwawbke
MD5

608baf276843388a72352e8644e2f780
SHA1

2feb2b8bad00f85d90bc7771274096771eda8aa7
SHA256

e99234362a42f0fa1010f345ef0ae37d467c37283613c97b2e93fd6faf3143dd
SHA512

b897601bd52224036f42551fed648438c868cad4857dca085024836491de277096bfd272dee576766a49279402e6ef649245313e5fc30058a4dac56d95aca16b
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

Score

10^/10

microsoft persistence phishing product:outlook upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

608baf276843388a72352e8644e2f780N.exe

Resource

win7-20240704-en

persistence upx

windows7-x64

5 signatures

120 seconds

Behavioral task

behavioral2

Sample

608baf276843388a72352e8644e2f780N.exe

Resource

win10v2004-20240709-en

microsoft persistence phishing product:outlook upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  608baf276843388a72352e8644e2f780N.exe
- Size
  
  41KB
- MD5
  
  608baf276843388a72352e8644e2f780
- SHA1
  
  2feb2b8bad00f85d90bc7771274096771eda8aa7
- SHA256
  
  e99234362a42f0fa1010f345ef0ae37d467c37283613c97b2e93fd6faf3143dd
- SHA512
  
  b897601bd52224036f42551fed648438c868cad4857dca085024836491de277096bfd272dee576766a49279402e6ef649245313e5fc30058a4dac56d95aca16b
- SSDEEP
  
  768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q
Score

10^/10

persistence upx microsoft phishing product:outlook
- Detected microsoft outlook phishing page
  phishing microsoft product:outlook
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishingproduct:outlookupx

© 2018-2025

Terms | Privacy