Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

d6e5bfea5d...a1.exe

windows7-x64

8

d6e5bfea5d...a1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6e5bfea5def9f8900c869455d59141e374f8f035d363ff83bc8b51647d05ba1

  • Size

    4.6MB

  • Sample

    221127-r8syqaae9t

  • MD5

    d3c26ef7a6509a8059e4c05f1926b0a8

  • SHA1

    46cdd1d607cdff66990e78f6c90d9b41b517b3eb

  • SHA256

    d6e5bfea5def9f8900c869455d59141e374f8f035d363ff83bc8b51647d05ba1

  • SHA512

    d4608b61bf7ece3edee254e7850c0ed170da1a8261af0a04fc5474abf5ad83c248149ed99a52393bca6820cee4a1ec5bd92ec6a7e70a9a6facdfe7898085591e

  • SSDEEP

    98304:YoBQXwcATVTwymaBp1tf3MIGT1CB5ckO:YoNBTVTwymaPbGTYB9

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      d6e5bfea5def9f8900c869455d59141e374f8f035d363ff83bc8b51647d05ba1

    • Size

      4.6MB

    • MD5

      d3c26ef7a6509a8059e4c05f1926b0a8

    • SHA1

      46cdd1d607cdff66990e78f6c90d9b41b517b3eb

    • SHA256

      d6e5bfea5def9f8900c869455d59141e374f8f035d363ff83bc8b51647d05ba1

    • SHA512

      d4608b61bf7ece3edee254e7850c0ed170da1a8261af0a04fc5474abf5ad83c248149ed99a52393bca6820cee4a1ec5bd92ec6a7e70a9a6facdfe7898085591e

    • SSDEEP

      98304:YoBQXwcATVTwymaBp1tf3MIGT1CB5ckO:YoNBTVTwymaPbGTYB9

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks