Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

a80cc19908...fc.exe

windows7-x64

8

a80cc19908...fc.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a80cc19908d993d8b667446b6726025aa2835a7966d60a2116e3c75006123bfc

  • Size

    168KB

  • Sample

    221201-ynswjseh86

  • MD5

    ff651652364f910808ee7f3f82c9adfd

  • SHA1

    0bcd552be1ed712cce28e3a3feae958c7c1ddd92

  • SHA256

    a80cc19908d993d8b667446b6726025aa2835a7966d60a2116e3c75006123bfc

  • SHA512

    14502514998ca4f7180801193b46abdc6748118f59719287c725b8af51c6b04505e68b8e7d8396ea56bf2ee767cdc760cb471e945224d0c525c88961a83fb84c

  • SSDEEP

    3072:/el11q4FjnSBipm+Ao4K7NASjfqaR4ow+RIgGPmQNQW+nfn9QtN2x:/el11q4FjnVuoJeDOZRIgGeQNJ+/++

Score
8/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      a80cc19908d993d8b667446b6726025aa2835a7966d60a2116e3c75006123bfc

    • Size

      168KB

    • MD5

      ff651652364f910808ee7f3f82c9adfd

    • SHA1

      0bcd552be1ed712cce28e3a3feae958c7c1ddd92

    • SHA256

      a80cc19908d993d8b667446b6726025aa2835a7966d60a2116e3c75006123bfc

    • SHA512

      14502514998ca4f7180801193b46abdc6748118f59719287c725b8af51c6b04505e68b8e7d8396ea56bf2ee767cdc760cb471e945224d0c525c88961a83fb84c

    • SSDEEP

      3072:/el11q4FjnSBipm+Ao4K7NASjfqaR4ow+RIgGPmQNQW+nfn9QtN2x:/el11q4FjnVuoJeDOZRIgGeQNJ+/++

    Score
    8/10
    persistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks