Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

14/10/2022, 17:56

221014-wh41hseaal 7

14/10/2022, 17:48

221014-wdxewadhg3 8

14/10/2022, 17:34

221014-v5h6wsdhfn 8

General

  • Target

    Pass_1234_Setup(4).rar

  • Size

    7.9MB

  • Sample

    221014-v5h6wsdhfn

  • MD5

    5726dd2f698a44a236eb8118d966130e

  • SHA1

    71e206c1616d62b9ca1195bcd7c5e3abb66ca9ff

  • SHA256

    f8689e4e8a829d2b2bea37c82ffe568b2db18463e706e63cebc33e375cb8d291

  • SHA512

    45e9bfbc43040f5126f85a887a7665ed7f89b3d4f864ab596f07ed3860ea7c087cb5b9e303ffc2682a2c2943f05012aedbad81c721cad1ab3d4264931d91e457

  • SSDEEP

    196608:3NsorGhLMYayVY5tx/sGBKP6OY4F7gkOMEuL34zcl:3wQyV+xfBKPjFEklIzcl

Score
8/10

Malware Config

Targets

    • Target

      Setup.exe

    • Size

      376.9MB

    • MD5

      2f9db86c1f07387ba6b0168d62ed2950

    • SHA1

      37ffc85149a8bdb31044c82c775ce329421ff77c

    • SHA256

      cfb9b1ded6e26c2ae213126dbe5301394754b076acf7d9b033794c79c4eeb8b2

    • SHA512

      9f5a3aa0447e09409306b36b0b41dbafe9e08c0112d0a43e6194c57830b5e023271d66010130b99d58cad8f352006dc63e82567e9697eef35cd6e0fdf526ac35

    • SSDEEP

      196608:3IERCPHzGscu98PPz6qC+pTDGwud0AvEO:4ERaHzGEgOqH/GwTEEO

    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Target

      langs/Hungarian.ini

    • Size

      107KB

    • MD5

      7591df7fae4342cbc7a0706e1b28e87b

    • SHA1

      825e88ad498e8713522f5aef3b21ee01d6fa8b41

    • SHA256

      fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d

    • SHA512

      8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4

    • SSDEEP

      3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X

    Score
    1/10
    • Target

      langs/Korean.ini

    • Size

      91KB

    • MD5

      efae0c78be2abe2920c78b9d4785ab45

    • SHA1

      8c0799fb68852cb071bbe260deb4ab357bd5f4ed

    • SHA256

      ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132

    • SHA512

      44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8

    • SSDEEP

      768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP

    Score
    1/10

MITRE ATT&CK Enterprise v6

Tasks