Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

3c08f651f4...0N.dll

windows7-x64

8

3c08f651f4...0N.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c08f651f47ac51bcb3220e4d188a8f0N.exe

  • Size

    76KB

  • Sample

    240716-a1jlmszdkc

  • MD5

    3c08f651f47ac51bcb3220e4d188a8f0

  • SHA1

    f985f6ac62ced4a287f0f5c11aa14beec849a609

  • SHA256

    f7a2d65f2b424b031bf36824860c93519a1f5399da50caeaac7ee0d1a9208c3b

  • SHA512

    0cec4e897d735867f082247bd8f2f1426845215dffaf05827430db510122f657a16b65f88769a33cb1b26af3b344a63b7b60bca82ab64b0193fc0969ca439762

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZWlsx:c8y93KQjy7G55riF1cMo03kOx

Score
10/10
floxifbackdoorpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      3c08f651f47ac51bcb3220e4d188a8f0N.exe

    • Size

      76KB

    • MD5

      3c08f651f47ac51bcb3220e4d188a8f0

    • SHA1

      f985f6ac62ced4a287f0f5c11aa14beec849a609

    • SHA256

      f7a2d65f2b424b031bf36824860c93519a1f5399da50caeaac7ee0d1a9208c3b

    • SHA512

      0cec4e897d735867f082247bd8f2f1426845215dffaf05827430db510122f657a16b65f88769a33cb1b26af3b344a63b7b60bca82ab64b0193fc0969ca439762

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZWlsx:c8y93KQjy7G55riF1cMo03kOx

    Score
    8/10
    persistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks