Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Swift.exe

  • Size

    495KB

  • Sample

    200713-xq4b2ekywn

  • MD5

    bc83a482919da0b018285329ba46e677

  • SHA1

    d5adf56fcd3c1b06acfdf4d2f439d88140029bd6

  • SHA256

    3abfb95be4564e9ae481978572cc87821b860b5aab3e1deb0df0d56c28d2d8d0

  • SHA512

    62e0c3b32afbaaa35f64030d59372c33c183e53a9346dcdf81deee376839b67d8ab9808177f03d7092923c1a9e54d67985229502918768148716862437f8ae91

Score
7/10

Malware Config

Targets

    • Target

      Swift.exe

    • Size

      495KB

    • MD5

      bc83a482919da0b018285329ba46e677

    • SHA1

      d5adf56fcd3c1b06acfdf4d2f439d88140029bd6

    • SHA256

      3abfb95be4564e9ae481978572cc87821b860b5aab3e1deb0df0d56c28d2d8d0

    • SHA512

      62e0c3b32afbaaa35f64030d59372c33c183e53a9346dcdf81deee376839b67d8ab9808177f03d7092923c1a9e54d67985229502918768148716862437f8ae91

    Score
    7/10
    • Drops startup file

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run entry to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks