Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

d57576c96c...0a.exe

windows7-x64

8

d57576c96c...0a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d57576c96c8c4ce84e3ec6adcf5ba4ea364e80272fc30d5b6ceba7353fed080a

  • Size

    175KB

  • Sample

    221011-2wbtsaaagl

  • MD5

    7aa7867a962e02f0ca753f3b2037fd03

  • SHA1

    f08170de3e21d58b82c4918b7a3ef9c25c71bb64

  • SHA256

    d57576c96c8c4ce84e3ec6adcf5ba4ea364e80272fc30d5b6ceba7353fed080a

  • SHA512

    8b0fabfdde37d49097ecbeb438a6ae070542e2fa4d7327923d4262ae50e28c1e3b9373b959ce5fc7e1ff86aab5dda2671b39a7f078b0a9c7d4650add90e89ca7

  • SSDEEP

    3072:6NQKPWDyzI0fFJltZrpReFX3GC8u0m92DNAYllgjEtLL081O0FmWGcs0RKRdWy1N:6NSDyzIkFthpr8042h9TgjMvvzFmWGcm

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      d57576c96c8c4ce84e3ec6adcf5ba4ea364e80272fc30d5b6ceba7353fed080a

    • Size

      175KB

    • MD5

      7aa7867a962e02f0ca753f3b2037fd03

    • SHA1

      f08170de3e21d58b82c4918b7a3ef9c25c71bb64

    • SHA256

      d57576c96c8c4ce84e3ec6adcf5ba4ea364e80272fc30d5b6ceba7353fed080a

    • SHA512

      8b0fabfdde37d49097ecbeb438a6ae070542e2fa4d7327923d4262ae50e28c1e3b9373b959ce5fc7e1ff86aab5dda2671b39a7f078b0a9c7d4650add90e89ca7

    • SSDEEP

      3072:6NQKPWDyzI0fFJltZrpReFX3GC8u0m92DNAYllgjEtLL081O0FmWGcs0RKRdWy1N:6NSDyzIkFthpr8042h9TgjMvvzFmWGcm

    Score
    8/10
    spywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks