Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
194s -
max time network
205s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25/11/2022, 13:34
General
-
Target
e0c9ea52b8750a2abaa5006481523f3eaa9d420fc7e3e670a3795d78fcf878a8.exe
-
Size
935KB
-
MD5
ec3f67921e31963ed39cb4e11345af13
-
SHA1
82bb4e8f99aed3a12921af595b9d5dc06be3fe17
-
SHA256
e0c9ea52b8750a2abaa5006481523f3eaa9d420fc7e3e670a3795d78fcf878a8
-
SHA512
64b6452dcb0cc799265d08c6da007c661c65442b70016e3a2dd35e434fb6a6890804809ff212f3804ec19ad7c36d5115c08de65c254d7a698ce3172654844d00
-
SSDEEP
24576:bID6QudHAV1pJCDYFgYfgNvWexE9MoAhMjcS8ZscrW:s5udHABJeY6YfgNvPEaTM3ca
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e0c9ea52b8750a2abaa5006481523f3eaa9d420fc7e3e670a3795d78fcf878a8.exe"C:\Users\Admin\AppData\Local\Temp\e0c9ea52b8750a2abaa5006481523f3eaa9d420fc7e3e670a3795d78fcf878a8.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx