7a69374666a9b781a1ab338f5cffbdf1aea238db6fd10631990e3a74310570d0 | Triage

Submit
Reports

Overview

overview

Static

static

3

7a69374666...d0.exe

windows7-x64

7a69374666...d0.exe

windows10-2004-x64

Sharing

General

Target

7a69374666a9b781a1ab338f5cffbdf1aea238db6fd10631990e3a74310570d0.exe.vir
Size

74.6MB
Sample

241122-a7ldta1kat
MD5

9da756b8c4da6eeca72850a15c657698
SHA1

716b1b67089b97f1a5bed77ac653d419b3275839
SHA256

7a69374666a9b781a1ab338f5cffbdf1aea238db6fd10631990e3a74310570d0
SHA512

17538f01565dc173e8162bef3aec9ce03c182865b3198b56564841c2b9ce99aa2247dfafa713228f2ff392570892c743cae40e3e80f2d9f9a796d958a8738e3e
SSDEEP

1572864:uHTWBlECjxMgp23PnpSRxxhaz/+df11/GgzBGQIj5Oi:AME+9unkRxDw/Mf/pBGRj5

Score

10^/10

discovery evasion persistence privilege_escalation trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7a69374666a9b781a1ab338f5cffbdf1aea238db6fd10631990e3a74310570d0.exe

Resource

win7-20241010-en

discovery evasion persistence privilege_escalation trojan upx

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

7a69374666a9b781a1ab338f5cffbdf1aea238db6fd10631990e3a74310570d0.exe

Resource

win10v2004-20241007-en

discovery evasion persistence privilege_escalation trojan upx

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  7a69374666a9b781a1ab338f5cffbdf1aea238db6fd10631990e3a74310570d0.exe.vir
- Size
  
  74.6MB
- MD5
  
  9da756b8c4da6eeca72850a15c657698
- SHA1
  
  716b1b67089b97f1a5bed77ac653d419b3275839
- SHA256
  
  7a69374666a9b781a1ab338f5cffbdf1aea238db6fd10631990e3a74310570d0
- SHA512
  
  17538f01565dc173e8162bef3aec9ce03c182865b3198b56564841c2b9ce99aa2247dfafa713228f2ff392570892c743cae40e3e80f2d9f9a796d958a8738e3e
- SSDEEP
  
  1572864:uHTWBlECjxMgp23PnpSRxxhaz/+df11/GgzBGQIj5Oi:AME+9unkRxDw/Mf/pBGRj5
Score

10^/10

discovery evasion persistence privilege_escalation trojan upx
- UAC bypass
  evasion trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojanupx

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojanupx

© 2018-2025

Terms | Privacy