Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    46H3mT16hDd9iAu.exe

  • Size

    366KB

  • Sample

    200713-f8myr7p2dn

  • MD5

    05964cb3d5ac0866f255dbff8c3e3d0b

  • SHA1

    b27cdb7d108d9866c21bf2deb539f74acf8c1335

  • SHA256

    d710447b99c5d26cac4643f971557e7d1b792010942ec3a4fc43ada5c02317da

  • SHA512

    cb9b01594cdbf15418e86459e35eaaf3af64d4a9d93b830278c09da665587ad84aa2305779c9e301cda30dfb45c1212aa8d4f313e0fb43b90419d7a9e5e023b5

Score
7/10

Malware Config

Targets

    • Target

      46H3mT16hDd9iAu.exe

    • Size

      366KB

    • MD5

      05964cb3d5ac0866f255dbff8c3e3d0b

    • SHA1

      b27cdb7d108d9866c21bf2deb539f74acf8c1335

    • SHA256

      d710447b99c5d26cac4643f971557e7d1b792010942ec3a4fc43ada5c02317da

    • SHA512

      cb9b01594cdbf15418e86459e35eaaf3af64d4a9d93b830278c09da665587ad84aa2305779c9e301cda30dfb45c1212aa8d4f313e0fb43b90419d7a9e5e023b5

    Score
    7/10
    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks