Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    kcW8HRnu9lJ2Kk7.exe

  • Size

    428KB

  • Sample

    200713-aqc5wd1vpn

  • MD5

    009d626f0527c9cb53fb1e41e2f618a2

  • SHA1

    eb728cdf10cdbb7089769249bca193c15d4b66ea

  • SHA256

    85f3f4ff256d8226555c9e7c1c346e32bd12255851d59eaa5ad645e12423519b

  • SHA512

    dee6fe0590c0d3b0823ee17b0941e23b650826bb6a54a571c732b957c935797ec66f12de974f8039a55c6812699a2b0dfae646b3c4409e79ef9bea321b3220d5

Score
7/10

Malware Config

Targets

    • Target

      kcW8HRnu9lJ2Kk7.exe

    • Size

      428KB

    • MD5

      009d626f0527c9cb53fb1e41e2f618a2

    • SHA1

      eb728cdf10cdbb7089769249bca193c15d4b66ea

    • SHA256

      85f3f4ff256d8226555c9e7c1c346e32bd12255851d59eaa5ad645e12423519b

    • SHA512

      dee6fe0590c0d3b0823ee17b0941e23b650826bb6a54a571c732b957c935797ec66f12de974f8039a55c6812699a2b0dfae646b3c4409e79ef9bea321b3220d5

    Score
    7/10
    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks