Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

4f79886759...0N.exe

windows7-x64

7

4f79886759...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f798867596f9cd37b8e8dc73bcc57d0N.exe

  • Size

    33KB

  • Sample

    240902-1cjjvaxeqn

  • MD5

    4f798867596f9cd37b8e8dc73bcc57d0

  • SHA1

    8d23eafcbe19587ea54f13b90e45996ce51c8fb0

  • SHA256

    37b32ff3c8c29630c4aaf4bb5f77fdcb399e2843929fc2cd42ce88837a34dbba

  • SHA512

    6a8c58d590f7fb9418c29fd3745ef91ff73cc69dab06d3b5d33ba868f6ac2874edd42195766b0cc7322f178b1ffe72be69e43bf341db2be63b3cecfd60cdbf74

  • SSDEEP

    384:A4/UCC8VcAaYRiUiiV7fhqc45u8gNrLRn4KE7p3oaNJawcudoD7US5EJN:AUUC151Npquv3Rn4KE7pRnbcuyD7UYE

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      4f798867596f9cd37b8e8dc73bcc57d0N.exe

    • Size

      33KB

    • MD5

      4f798867596f9cd37b8e8dc73bcc57d0

    • SHA1

      8d23eafcbe19587ea54f13b90e45996ce51c8fb0

    • SHA256

      37b32ff3c8c29630c4aaf4bb5f77fdcb399e2843929fc2cd42ce88837a34dbba

    • SHA512

      6a8c58d590f7fb9418c29fd3745ef91ff73cc69dab06d3b5d33ba868f6ac2874edd42195766b0cc7322f178b1ffe72be69e43bf341db2be63b3cecfd60cdbf74

    • SSDEEP

      384:A4/UCC8VcAaYRiUiiV7fhqc45u8gNrLRn4KE7p3oaNJawcudoD7US5EJN:AUUC151Npquv3Rn4KE7pRnbcuyD7UYE

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks