Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

HETZERDOX.exe

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HETZERDOX.exe

  • Size

    17.8MB

  • Sample

    240806-levmkavhrn

  • MD5

    d76ce056e534e3cabc75c3ffe5d5d09b

  • SHA1

    676db164e30059a15267fda5cbe3f83d57d98afc

  • SHA256

    cc31f751002b39cd4e0c4ec31dbebc9a28516043ac27a807831e291e609c7e68

  • SHA512

    8c50e5edc6064aa28d8caf69b7f3007fbeec8efc31c29178d1bd53b013f16f25bdb112f82e80449425c9672b66ccb06491cdeee7a81f02f81763eb22efd4d172

  • SSDEEP

    393216:HqPnLFXlrWQ8DOETgsvfGFFggpwvEC3Z1fJBiq:KPLFXNWQhE43Defz

Score
10/10
empyreanpyinstallerupx

Malware Config

Targets

    • Target

      HETZERDOX.exe

    • Size

      17.8MB

    • MD5

      d76ce056e534e3cabc75c3ffe5d5d09b

    • SHA1

      676db164e30059a15267fda5cbe3f83d57d98afc

    • SHA256

      cc31f751002b39cd4e0c4ec31dbebc9a28516043ac27a807831e291e609c7e68

    • SHA512

      8c50e5edc6064aa28d8caf69b7f3007fbeec8efc31c29178d1bd53b013f16f25bdb112f82e80449425c9672b66ccb06491cdeee7a81f02f81763eb22efd4d172

    • SSDEEP

      393216:HqPnLFXlrWQ8DOETgsvfGFFggpwvEC3Z1fJBiq:KPLFXNWQhE43Defz

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks