Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8268206ff8...05.exe

windows7-x64

8

8268206ff8...05.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8268206ff89ff10527e9fed4c2a201ff3dc1c2d0911a3994d768c39bb26af505

  • Size

    250KB

  • Sample

    221203-22cm9shc3w

  • MD5

    8c26f9e36a80b31395fa0c3f772b5da8

  • SHA1

    908b7eb04f016acdd72cae3ab012581aa9572e91

  • SHA256

    8268206ff89ff10527e9fed4c2a201ff3dc1c2d0911a3994d768c39bb26af505

  • SHA512

    cf2485264206e1d8b7ff4edc2029b97398f1a267e2064d9aa3a38a71ecec79d14b2307cb142e090979af437a3a5e52de707e4a6477b78d98df14ce8c1e34c528

  • SSDEEP

    6144:SY94NbU9TsoGV4I+NR/lHU+Rk1vP/T6bLgDvyHnPyqq5BfTZR:R9ObU9TsoqgbtHdIPebW6/q5VTD

Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      8268206ff89ff10527e9fed4c2a201ff3dc1c2d0911a3994d768c39bb26af505

    • Size

      250KB

    • MD5

      8c26f9e36a80b31395fa0c3f772b5da8

    • SHA1

      908b7eb04f016acdd72cae3ab012581aa9572e91

    • SHA256

      8268206ff89ff10527e9fed4c2a201ff3dc1c2d0911a3994d768c39bb26af505

    • SHA512

      cf2485264206e1d8b7ff4edc2029b97398f1a267e2064d9aa3a38a71ecec79d14b2307cb142e090979af437a3a5e52de707e4a6477b78d98df14ce8c1e34c528

    • SSDEEP

      6144:SY94NbU9TsoGV4I+NR/lHU+Rk1vP/T6bLgDvyHnPyqq5BfTZR:R9ObU9TsoqgbtHdIPebW6/q5VTD

    Score
    8/10
    adwarepersistencestealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks