Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

ihatemyself.exe

windows7-x64

7

ihatemyself.exe

windows10-2004-x64

8

Resubmissions

27/03/2025, 17:51

250327-wflfdsxqz8 3

27/03/2025, 17:49

250327-wd7wlsxqy4 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ihatemyself.exe

  • Size

    10.2MB

  • Sample

    250327-wd7wlsxqy4

  • MD5

    62bcf7195069af6ff3cb9ae511fd804e

  • SHA1

    b2f80fe2ccb7fde7970df28108e2b9763dfafeab

  • SHA256

    a3d202f8812b9ea5fb844f570420609c400b3cb926fd4d8495c99a47441a42a5

  • SHA512

    f037d3f30c2e45b10bcb08e19db0fbcaa04bdb015da8e5b945ca8f47a1f78854272a46723f5bcf1f8be4b4c225414ba7b103b87d8b489e1d63df98121f292cdb

  • SSDEEP

    196608:wj0sKYu/PaQtsJ8NL1W903eV4QF4KF5ikWMWKACyXFl1J:MQtsqNZW+eGQFn/ikWMWnl7

Score
8/10
defense_evasiondiscoveryexecutionexploitpyinstallertrojan

Malware Config

Targets

    • Target

      ihatemyself.exe

    • Size

      10.2MB

    • MD5

      62bcf7195069af6ff3cb9ae511fd804e

    • SHA1

      b2f80fe2ccb7fde7970df28108e2b9763dfafeab

    • SHA256

      a3d202f8812b9ea5fb844f570420609c400b3cb926fd4d8495c99a47441a42a5

    • SHA512

      f037d3f30c2e45b10bcb08e19db0fbcaa04bdb015da8e5b945ca8f47a1f78854272a46723f5bcf1f8be4b4c225414ba7b103b87d8b489e1d63df98121f292cdb

    • SSDEEP

      196608:wj0sKYu/PaQtsJ8NL1W903eV4QF4KF5ikWMWKACyXFl1J:MQtsqNZW+eGQFn/ikWMWnl7

    Score
    8/10
    defense_evasiondiscoveryexecutionexploittrojan

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Possible privilege escalation attempt

      exploit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Hide Artifacts: Hidden Window

      Windows that would typically be displayed when an application carries out an operation can be hidden.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks