Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fixed.exe

windows11-21h2-x64

8

*���7.pyc

windows11-21h2-x64

Resubmissions

26/03/2025, 17:41

250326-v9xj3szvbv 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fixed.exe

  • Size

    6.6MB

  • Sample

    250326-v9xj3szvbv

  • MD5

    fdb2d3fcdffa49470fcc581e74b14fa6

  • SHA1

    03eb5a18a0ae350f10eca692206ae3ff8b8b2c73

  • SHA256

    909708f4ec8f0e1f2cd1167839462deb42dd817592bd3944cdf779a737c0f1db

  • SHA512

    cae56ac757bc80a1dbdaf25f8033aee646cdf2a7ce9f86caffb6e74463a65efacb7b9ce46d9543a773a9f2c23723f11fc7600cd646e6e527ea0b481fe53cea94

  • SSDEEP

    196608:HWRyDOYjJlpZstQoS9Hf12VKXMSEzb0CXVXhy:5BpGt7G/MyIb7Ry

Score
10/10
blankgrabberdiscoveryexecutionupx

Malware Config

Targets

    • Target

      fixed.exe

    • Size

      6.6MB

    • MD5

      fdb2d3fcdffa49470fcc581e74b14fa6

    • SHA1

      03eb5a18a0ae350f10eca692206ae3ff8b8b2c73

    • SHA256

      909708f4ec8f0e1f2cd1167839462deb42dd817592bd3944cdf779a737c0f1db

    • SHA512

      cae56ac757bc80a1dbdaf25f8033aee646cdf2a7ce9f86caffb6e74463a65efacb7b9ce46d9543a773a9f2c23723f11fc7600cd646e6e527ea0b481fe53cea94

    • SSDEEP

      196608:HWRyDOYjJlpZstQoS9Hf12VKXMSEzb0CXVXhy:5BpGt7G/MyIb7Ry

    Score
    8/10
    discoveryexecutionupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

    • Target

      *���7.pyc

    • Size

      857B

    • MD5

      d7019e13f134eb3260c1cf4747e6f937

    • SHA1

      39aa79f9579340507c4685bd722fd6a4f9d22949

    • SHA256

      d028b7099614e759e7fb27a5892d76447046d922341f39d4ef7c1c058ae52e37

    • SHA512

      056dc1463faadc3e18c5fd0119c5eb2962ea5b51196d9928aabd7a06f24418a5b918c98388825df8e835bd253e0a8fdb1c2fd454ee333a75c9ce0f9383e825fc

    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks