Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

91781f31eb...0N.exe

windows7-x64

7

91781f31eb...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91781f31eb91b3e2dfb4be773b565f90N

  • Size

    2.2MB

  • Sample

    240826-jphpmsshlb

  • MD5

    91781f31eb91b3e2dfb4be773b565f90

  • SHA1

    8b7b44922b905ac32d228fed8d2581321a8ede87

  • SHA256

    323d24da8aa4da3b38025eb86fc871b8b48779dfc5c22b590feef3680c7da007

  • SHA512

    8b09580e44fad7d75f0591a3c5d8861328bb456808996d17dd526f2d3e1e76ff513fea9e40f0a803930118d0b1e436dfbc047b0ff824bf9118ca80a32d63b564

  • SSDEEP

    49152:AcQbYD/jGLnJcN+9zWFULG+aLP6hN5aC67sv/nj0cN+9zWFULG+aLP6hX:AcQbYD/KLnqA9zyULG+aLP25ah7k/jp6

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      91781f31eb91b3e2dfb4be773b565f90N

    • Size

      2.2MB

    • MD5

      91781f31eb91b3e2dfb4be773b565f90

    • SHA1

      8b7b44922b905ac32d228fed8d2581321a8ede87

    • SHA256

      323d24da8aa4da3b38025eb86fc871b8b48779dfc5c22b590feef3680c7da007

    • SHA512

      8b09580e44fad7d75f0591a3c5d8861328bb456808996d17dd526f2d3e1e76ff513fea9e40f0a803930118d0b1e436dfbc047b0ff824bf9118ca80a32d63b564

    • SSDEEP

      49152:AcQbYD/jGLnJcN+9zWFULG+aLP6hN5aC67sv/nj0cN+9zWFULG+aLP6hX:AcQbYD/KLnqA9zyULG+aLP25ah7k/jp6

    Score
    7/10
    discoveryupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks