3448f9b0716afc7106595a7765f6d3544e25c5dfbbd2e83604c5170ea82ef664 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

3448f9b071...64.exe

windows7-x64

8

3448f9b071...64.exe

windows10-2004-x64

8

Sharing

General

Target

3448f9b0716afc7106595a7765f6d3544e25c5dfbbd2e83604c5170ea82ef664
Size

573KB
Sample

240908-w3h9jssgpf
MD5

fd53aa04a0dafdb9fa604826affdc344
SHA1

be14d050d1b7eae16de537c6d4cc5e3111d1068e
SHA256

3448f9b0716afc7106595a7765f6d3544e25c5dfbbd2e83604c5170ea82ef664
SHA512

e77b193af7b7468eb1516bcab0ce41b8146a7c59904643c8553017704fdd868d8dc38cdad8a43b0b4a064dc75f09e662550561c60eb02a0d763006701ea9f51f
SSDEEP

12288:BmbKknYt4pmY2QzHeiILKhLKYVu/An5WDhQslKTAfKdBFhlOti5s:BmbKPoQQrjIiLKYVu/9uSDfKbDsi5s

Score

8^/10

defense_evasion discovery evasion execution upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

3448f9b0716afc7106595a7765f6d3544e25c5dfbbd2e83604c5170ea82ef664.exe

Resource

win7-20240903-en

defense_evasion discovery evasion execution upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

3448f9b0716afc7106595a7765f6d3544e25c5dfbbd2e83604c5170ea82ef664.exe

Resource

win10v2004-20240802-en

defense_evasion discovery evasion execution upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  3448f9b0716afc7106595a7765f6d3544e25c5dfbbd2e83604c5170ea82ef664
- Size
  
  573KB
- MD5
  
  fd53aa04a0dafdb9fa604826affdc344
- SHA1
  
  be14d050d1b7eae16de537c6d4cc5e3111d1068e
- SHA256
  
  3448f9b0716afc7106595a7765f6d3544e25c5dfbbd2e83604c5170ea82ef664
- SHA512
  
  e77b193af7b7468eb1516bcab0ce41b8146a7c59904643c8553017704fdd868d8dc38cdad8a43b0b4a064dc75f09e662550561c60eb02a0d763006701ea9f51f
- SSDEEP
  
  12288:BmbKknYt4pmY2QzHeiILKhLKYVu/An5WDhQslKTAfKdBFhlOti5s:BmbKPoQQrjIiLKYVu/9uSDfKbDsi5s
Score

8^/10

defense_evasion discovery evasion execution upx
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Indicator Removal

File Deletion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexecutionupx

behavioral2

defense_evasiondiscoveryevasionexecutionupx

© 2018-2025

Terms | Privacy