Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

ea033344aa...a4.exe

windows7-x64

10

ea033344aa...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea033344aad926a25795f8cb5f57d7a062043b2df2c658178c790fea5bf370a4

  • Size

    312KB

  • Sample

    221129-dywpzaba94

  • MD5

    f2bd3ff1f659c85003fe682410d8f307

  • SHA1

    84aa855c60aeadd09117ced1829603da5135797f

  • SHA256

    ea033344aad926a25795f8cb5f57d7a062043b2df2c658178c790fea5bf370a4

  • SHA512

    e7656450e5a8528b053a416acbd44916c5d10775a0206a80718fbc4ce4a1ab105f124f184c1e49e7329d4aa30815557351f9712077265d97f36c152de9d0cada

  • SSDEEP

    3072:9QXGBmOAtI5NQd8VX2auQkflCRU9cM7QJhZ9mUj6uEzEHNiBqoZxC5FSnhaVEP:9jbNQda3rswv65zn7ZXM+

Score
10/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      ea033344aad926a25795f8cb5f57d7a062043b2df2c658178c790fea5bf370a4

    • Size

      312KB

    • MD5

      f2bd3ff1f659c85003fe682410d8f307

    • SHA1

      84aa855c60aeadd09117ced1829603da5135797f

    • SHA256

      ea033344aad926a25795f8cb5f57d7a062043b2df2c658178c790fea5bf370a4

    • SHA512

      e7656450e5a8528b053a416acbd44916c5d10775a0206a80718fbc4ce4a1ab105f124f184c1e49e7329d4aa30815557351f9712077265d97f36c152de9d0cada

    • SSDEEP

      3072:9QXGBmOAtI5NQd8VX2auQkflCRU9cM7QJhZ9mUj6uEzEHNiBqoZxC5FSnhaVEP:9jbNQda3rswv65zn7ZXM+

    Score
    10/10
    evasionpersistencespywarestealer

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks