Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

af6b7aecee...0N.exe

windows7-x64

8

af6b7aecee...0N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af6b7aecee40ff169a5a9b933c6c7360N.exe

  • Size

    182KB

  • Sample

    240814-kn8ecasgrb

  • MD5

    af6b7aecee40ff169a5a9b933c6c7360

  • SHA1

    466473fe72c71588aa31e88e6d68aa928c6e9d57

  • SHA256

    ce09513ea89afbbde77755c1faa4726067a5487411cd313086117a2ca452db05

  • SHA512

    7debf54952c2cb5b8cdb4ef0f6e1d2f08a9ce9389301b3cc64074761970866e332aaa1ebbd10cce347e084ca6c8470f27318432eb8b4af51b9de8ceb24d436a7

  • SSDEEP

    3072:Ra/19V4h2MhFQWAvObwqjEkYSimELuCusaiU+pPXjiYBu4v/VtRuCRH5FPcbyk7F:RaN9V4wKFQGR/YSMuJJiXpPziYBuE/VI

Score
8/10
discoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      af6b7aecee40ff169a5a9b933c6c7360N.exe

    • Size

      182KB

    • MD5

      af6b7aecee40ff169a5a9b933c6c7360

    • SHA1

      466473fe72c71588aa31e88e6d68aa928c6e9d57

    • SHA256

      ce09513ea89afbbde77755c1faa4726067a5487411cd313086117a2ca452db05

    • SHA512

      7debf54952c2cb5b8cdb4ef0f6e1d2f08a9ce9389301b3cc64074761970866e332aaa1ebbd10cce347e084ca6c8470f27318432eb8b4af51b9de8ceb24d436a7

    • SSDEEP

      3072:Ra/19V4h2MhFQWAvObwqjEkYSimELuCusaiU+pPXjiYBu4v/VtRuCRH5FPcbyk7F:RaN9V4wKFQGR/YSMuJJiXpPziYBuE/VI

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks