Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

8

7b5c2a5b9f...22.exe

windows7-x64

9

7b5c2a5b9f...22.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b5c2a5b9f4d9669613d2d640021feefba35fbbc43b0c9e955da54f545e4d322

  • Size

    906KB

  • Sample

    221106-fgl6badag9

  • MD5

    279e4d49ee709d3e740cbf1a11a53210

  • SHA1

    5243a029f96c61d496f70d0977941858b7cf7842

  • SHA256

    7b5c2a5b9f4d9669613d2d640021feefba35fbbc43b0c9e955da54f545e4d322

  • SHA512

    11358f1fdd14a8bd303464ce7d6af286f036d44ccd965dd9a6928efcc6b01a43e4645b26f3a61d3aadce4ed64d56b8916d179a777625aa7d37868f3daddec6cc

  • SSDEEP

    24576:ZePmbZpwZloMwvCvdoDzMPLIrv0+M6t4fXdV+7:7bZDMwqCHMPLIzftgD6

Score
9/10
aspackv2persistencespywarestealer

Malware Config

Targets

    • Target

      7b5c2a5b9f4d9669613d2d640021feefba35fbbc43b0c9e955da54f545e4d322

    • Size

      906KB

    • MD5

      279e4d49ee709d3e740cbf1a11a53210

    • SHA1

      5243a029f96c61d496f70d0977941858b7cf7842

    • SHA256

      7b5c2a5b9f4d9669613d2d640021feefba35fbbc43b0c9e955da54f545e4d322

    • SHA512

      11358f1fdd14a8bd303464ce7d6af286f036d44ccd965dd9a6928efcc6b01a43e4645b26f3a61d3aadce4ed64d56b8916d179a777625aa7d37868f3daddec6cc

    • SSDEEP

      24576:ZePmbZpwZloMwvCvdoDzMPLIrv0+M6t4fXdV+7:7bZDMwqCHMPLIzftgD6

    Score
    9/10
    aspackv2persistencespywarestealer

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Sets service image path in registry

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks