Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

c0fdba7ec2...85.exe

windows7-x64

7

c0fdba7ec2...85.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    42s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    28/11/2022, 04:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c0fdba7ec271b00f52078430c627a7587151c16f4d1bd6de292d22eccc76f185.exe

  • Size

    973KB

  • MD5

    1af61a77d3b68258cfb92c16ec9c4fed

  • SHA1

    e189a255eaf42c4071d4e8429e8cd4149f31d61a

  • SHA256

    c0fdba7ec271b00f52078430c627a7587151c16f4d1bd6de292d22eccc76f185

  • SHA512

    8cc99d9b5b90e514f035b673c76f983d8ea640f66da1d334a0f4721a14923a190be2218cddf1813fd733819efc27172bbef2dcd44b7495ef4f140751055397e5

  • SSDEEP

    24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrr/7wH5:IR0GRJ5RsBPUKGhtQugkZOxa5

Score
7/10
spywarestealer

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c0fdba7ec271b00f52078430c627a7587151c16f4d1bd6de292d22eccc76f185.exe
    "C:\Users\Admin\AppData\Local\Temp\c0fdba7ec271b00f52078430c627a7587151c16f4d1bd6de292d22eccc76f185.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1720

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1720-54-0x00000000765B1000-0x00000000765B3000-memory.dmp

    Filesize

    8KB

    Download