Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

ea59a35fa0...c4.exe

windows7-x64

8

ea59a35fa0...c4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea59a35fa0c519455f3ba648389c72b1f689429aa8411592b0b89c257d3241c4

  • Size

    56KB

  • Sample

    221021-c76e4ahbc5

  • MD5

    74a74854535bc0e540151baedf0cc810

  • SHA1

    97e6088262fe08073efe6fbd4c3110549267359f

  • SHA256

    ea59a35fa0c519455f3ba648389c72b1f689429aa8411592b0b89c257d3241c4

  • SHA512

    c62bae70ed3631404730ce91f3e22241213e5a98b8101190ec4f31faa2185ef32ace266987bd0d9dfcd9996101fd68d48a1d5c5d4e5d5aa58ef83843a3994dcc

  • SSDEEP

    768:zj6mzjp5ozbIDXjV60X4yTP4iXqX5eVVoOhBfvCq5n:Bp5ogjV6KTPHA5eXomk

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      ea59a35fa0c519455f3ba648389c72b1f689429aa8411592b0b89c257d3241c4

    • Size

      56KB

    • MD5

      74a74854535bc0e540151baedf0cc810

    • SHA1

      97e6088262fe08073efe6fbd4c3110549267359f

    • SHA256

      ea59a35fa0c519455f3ba648389c72b1f689429aa8411592b0b89c257d3241c4

    • SHA512

      c62bae70ed3631404730ce91f3e22241213e5a98b8101190ec4f31faa2185ef32ace266987bd0d9dfcd9996101fd68d48a1d5c5d4e5d5aa58ef83843a3994dcc

    • SSDEEP

      768:zj6mzjp5ozbIDXjV60X4yTP4iXqX5eVVoOhBfvCq5n:Bp5ogjV6KTPHA5eXomk

    Score
    8/10
    spywarestealer

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks