Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

18597821b5...dd.exe

windows7-x64

8

18597821b5...dd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18597821b56fece66e74b2284579f137224884e3afcf410c9c5aaf7d01d9cedd

  • Size

    135KB

  • Sample

    221003-kc8wqsgfaj

  • MD5

    461238903c693025d9f38a9207d53d34

  • SHA1

    3ec5bb081fef28b54a7b11b571ee89e236f33203

  • SHA256

    18597821b56fece66e74b2284579f137224884e3afcf410c9c5aaf7d01d9cedd

  • SHA512

    937523bb39f1c85acf8a219de63cbfa6c65f036c96931403fc7bc1ac0d29c22e246e951f0879110051f9aeb327b35e93882e2948d01031378b9c34d6b9bea8f3

  • SSDEEP

    3072:dqicUvY3ES2OYSGDvi84HynuNk8wNCFs3:dftY0Bj14HyMxQCFs3

Score
8/10
persistencespywarestealer

Malware Config

Targets

    • Target

      18597821b56fece66e74b2284579f137224884e3afcf410c9c5aaf7d01d9cedd

    • Size

      135KB

    • MD5

      461238903c693025d9f38a9207d53d34

    • SHA1

      3ec5bb081fef28b54a7b11b571ee89e236f33203

    • SHA256

      18597821b56fece66e74b2284579f137224884e3afcf410c9c5aaf7d01d9cedd

    • SHA512

      937523bb39f1c85acf8a219de63cbfa6c65f036c96931403fc7bc1ac0d29c22e246e951f0879110051f9aeb327b35e93882e2948d01031378b9c34d6b9bea8f3

    • SSDEEP

      3072:dqicUvY3ES2OYSGDvi84HynuNk8wNCFs3:dftY0Bj14HyMxQCFs3

    Score
    8/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks