Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3eJYx791KGJwBky.exe

  • Size

    634KB

  • Sample

    200707-sm4ghsxbgj

  • MD5

    bdf0bd829a591a7786fa902c788a0590

  • SHA1

    5284c7b945df828ad036fd604a3aee3cb0fb2555

  • SHA256

    5cf10faa1d3568be564f096b940d45f2016b5f27289c72e03defe2dabc7e4670

  • SHA512

    e7fceaa3be3ac71be49dbe8737ac19bec0fe96643336fa2e2978395ba8c1910349aa9df68b3a2ab1831da36633e8b214f2b0fd6ff149e4ba382dc5e9bc7e64d6

Score
7/10

Malware Config

Targets

    • Target

      3eJYx791KGJwBky.exe

    • Size

      634KB

    • MD5

      bdf0bd829a591a7786fa902c788a0590

    • SHA1

      5284c7b945df828ad036fd604a3aee3cb0fb2555

    • SHA256

      5cf10faa1d3568be564f096b940d45f2016b5f27289c72e03defe2dabc7e4670

    • SHA512

      e7fceaa3be3ac71be49dbe8737ac19bec0fe96643336fa2e2978395ba8c1910349aa9df68b3a2ab1831da36633e8b214f2b0fd6ff149e4ba382dc5e9bc7e64d6

    Score
    7/10
    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks