Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

Purchase_Order.exe

windows7_x64

8

Purchase_Order.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Purchase_Order.exe

  • Size

    638KB

  • Sample

    200713-s9nj9pyhhj

  • MD5

    6a2a8086b34fbd0dfe9dd3dc433d77d6

  • SHA1

    d2b6c5b889844e685c64322c11d86b22a005b165

  • SHA256

    8f60548d2cde9e0681d8609aef71f51c820073a2a70e75bfa0fa56e3890d94e0

  • SHA512

    b84db37efc9d329d17b893effa14188be4b244e0e1451a04623faeb0bb592f7b60fcefbc7bf483b0651202262dde532ae3f72e8fb809aff733fe346767aa6a7e

Score
8/10
evasionspywaretrojan

Malware Config

Targets

    • Target

      Purchase_Order.exe

    • Size

      638KB

    • MD5

      6a2a8086b34fbd0dfe9dd3dc433d77d6

    • SHA1

      d2b6c5b889844e685c64322c11d86b22a005b165

    • SHA256

      8f60548d2cde9e0681d8609aef71f51c820073a2a70e75bfa0fa56e3890d94e0

    • SHA512

      b84db37efc9d329d17b893effa14188be4b244e0e1451a04623faeb0bb592f7b60fcefbc7bf483b0651202262dde532ae3f72e8fb809aff733fe346767aa6a7e

    Score
    8/10
    spywareevasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks