Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

cb5d26a3a8...17.exe

windows7-x64

1

cb5d26a3a8...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb5d26a3a8b898a40f201825aa18cea7df7449aed863b83148ad71cd6d61b517

  • Size

    50KB

  • Sample

    221121-k358jace82

  • MD5

    1a239770f419f3401508073fd348c1bc

  • SHA1

    a8ecbe72bb45c3f4613a8c9da28cf78b549d2d67

  • SHA256

    cb5d26a3a8b898a40f201825aa18cea7df7449aed863b83148ad71cd6d61b517

  • SHA512

    9b18f9217d12670f90145a234639817a31492e3533ae07d4e55fd64e6f816039152a6517a585eb603563951b609045405e8d1d7b2a38842890185899598da466

  • SSDEEP

    768:WFjG7I34bFD+kI5XyX6O/iuf2ooSFPP1l6SPQAA9kILXAiQDZ3A:WFjG7I3kxXh/iuf2gJ1sSPQAA9A3A

Score
10/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      cb5d26a3a8b898a40f201825aa18cea7df7449aed863b83148ad71cd6d61b517

    • Size

      50KB

    • MD5

      1a239770f419f3401508073fd348c1bc

    • SHA1

      a8ecbe72bb45c3f4613a8c9da28cf78b549d2d67

    • SHA256

      cb5d26a3a8b898a40f201825aa18cea7df7449aed863b83148ad71cd6d61b517

    • SHA512

      9b18f9217d12670f90145a234639817a31492e3533ae07d4e55fd64e6f816039152a6517a585eb603563951b609045405e8d1d7b2a38842890185899598da466

    • SSDEEP

      768:WFjG7I34bFD+kI5XyX6O/iuf2ooSFPP1l6SPQAA9kILXAiQDZ3A:WFjG7I3kxXh/iuf2gJ1sSPQAA9A3A

    Score
    10/10
    adwarepersistencestealer

    • Modifies WinLogon for persistence

      persistence

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks