Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

7965701c18...bN.dll

windows7-x64

8

7965701c18...bN.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7965701c18b0d1a5025cd2f0b3bbe480232074c82b946ce95e78fe544747a01bN

  • Size

    76KB

  • Sample

    241014-npv27ayfjr

  • MD5

    23b127414d0a13c6c6a8b9c1ed0a3820

  • SHA1

    7e98521502a744af8e3d7e5567ebd7eed1df193d

  • SHA256

    7965701c18b0d1a5025cd2f0b3bbe480232074c82b946ce95e78fe544747a01b

  • SHA512

    42c8e1297e1e22494d71d7b7630d07c8d686b41addac2dd18b64c036a341e4169bdee9dd259686f81dcb1be428d4d4066a4baa6854cb26e6f3f3594292bc717d

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zb1Xh4v/:c8y93KQjy7G55riF1cMo03jXg/

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      7965701c18b0d1a5025cd2f0b3bbe480232074c82b946ce95e78fe544747a01bN

    • Size

      76KB

    • MD5

      23b127414d0a13c6c6a8b9c1ed0a3820

    • SHA1

      7e98521502a744af8e3d7e5567ebd7eed1df193d

    • SHA256

      7965701c18b0d1a5025cd2f0b3bbe480232074c82b946ce95e78fe544747a01b

    • SHA512

      42c8e1297e1e22494d71d7b7630d07c8d686b41addac2dd18b64c036a341e4169bdee9dd259686f81dcb1be428d4d4066a4baa6854cb26e6f3f3594292bc717d

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zb1Xh4v/:c8y93KQjy7G55riF1cMo03jXg/

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks