Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

dc8440bf46...8c.exe

windows7-x64

8

dc8440bf46...8c.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc8440bf4629d8e0d6f6863cc865b115a5806155a91e558bd2efe59164f4058c

  • Size

    812KB

  • Sample

    221127-r6rymsad5z

  • MD5

    ed50bc1a8b063d4dbb7929e38d95595d

  • SHA1

    cf109a9a2f82f5fe66cd271f188c2ec90e5e6bc8

  • SHA256

    dc8440bf4629d8e0d6f6863cc865b115a5806155a91e558bd2efe59164f4058c

  • SHA512

    4d664982f0a073ed22d55b6bfe35a801784f1c00a70111877ae7976dde80973fcd8c3fdbcbe1c33d7fe398a3e1e76dd1e0dad72e377305552bf784c62a7cbdbe

  • SSDEEP

    24576:EmzMUG5crCdOot43YCbWQk7kkJZtIaVpK+LErX:E1UmdcR8FJcae+LE

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      dc8440bf4629d8e0d6f6863cc865b115a5806155a91e558bd2efe59164f4058c

    • Size

      812KB

    • MD5

      ed50bc1a8b063d4dbb7929e38d95595d

    • SHA1

      cf109a9a2f82f5fe66cd271f188c2ec90e5e6bc8

    • SHA256

      dc8440bf4629d8e0d6f6863cc865b115a5806155a91e558bd2efe59164f4058c

    • SHA512

      4d664982f0a073ed22d55b6bfe35a801784f1c00a70111877ae7976dde80973fcd8c3fdbcbe1c33d7fe398a3e1e76dd1e0dad72e377305552bf784c62a7cbdbe

    • SSDEEP

      24576:EmzMUG5crCdOot43YCbWQk7kkJZtIaVpK+LErX:E1UmdcR8FJcae+LE

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks