blankgrabber | d1f6950fa815d4be5431b4bdbfe240354103e1d73811a7d211748cecf1efa976 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

test.exe

windows7-x64

7

test.exe

windows10-2004-x64

8

Sharing

General

Target

test.exe
Size

8.2MB
Sample

241010-kv9wrasdqh
MD5

9ae3bffcc517a7082e29e37f5786bd33
SHA1

e8b39fe8e75329a5366bb205216803a67595872d
SHA256

d1f6950fa815d4be5431b4bdbfe240354103e1d73811a7d211748cecf1efa976
SHA512

fae7b69c15dfd12b8c59b8dc2cb85bea6c15af6df0af08cbcbd2f7682a643b126d97e2a016cd220c74a6e38f0343d209dc554771029b38c1d71d16b30eb12baa
SSDEEP

196608:LxtQ008urErvI9pWjgN3ZdahF0pbH1AYSEp6GrUniC+ICz0faxF:durEUWjqeWxQFGrgSzxF

Score

10^/10

blankgrabber discovery execution upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

test.exe

Resource

win7-20240708-en

windows7-x64

3 signatures

10 seconds

Behavioral task

behavioral2

Sample

test.exe

Resource

win10v2004-20241007-en

discovery execution upx

windows10-2004-x64

8 signatures

10 seconds

Malware Config

Targets

- Target
  
  test.exe
- Size
  
  8.2MB
- MD5
  
  9ae3bffcc517a7082e29e37f5786bd33
- SHA1
  
  e8b39fe8e75329a5366bb205216803a67595872d
- SHA256
  
  d1f6950fa815d4be5431b4bdbfe240354103e1d73811a7d211748cecf1efa976
- SHA512
  
  fae7b69c15dfd12b8c59b8dc2cb85bea6c15af6df0af08cbcbd2f7682a643b126d97e2a016cd220c74a6e38f0343d209dc554771029b38c1d71d16b30eb12baa
- SSDEEP
  
  196608:LxtQ008urErvI9pWjgN3ZdahF0pbH1AYSEp6GrUniC+ICz0faxF:durEUWjqeWxQFGrgSzxF
Score

8^/10

upx discovery execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Enumerates processes with tasklist
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryexecutionupx

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.