Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

f7c96192bd...78.exe

windows7-x64

8

f7c96192bd...78.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7c96192bdf6b51bb46588a6601196253a5abce083eb8afff793f523dca8f578

  • Size

    1.1MB

  • Sample

    221203-c6lz3agd98

  • MD5

    065ab35507815599b533bc5fb5c8843d

  • SHA1

    5ea0410472228936a8574cb900d2ec9b9417e13d

  • SHA256

    f7c96192bdf6b51bb46588a6601196253a5abce083eb8afff793f523dca8f578

  • SHA512

    4866063ea24915de842d844b8b0c802bdb875d6f4d271deb155be074ed8179c676d3063f05f6152a47a19b026cdd8ad9847f3f64ee47946c13b1af5deeebda6f

  • SSDEEP

    24576:YSrIg9yu8nidH4wz4ToE1w9Hq8p8yyX/40QfAjGBd:Nr1enw4m4z1/8p8y+/408Bd

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      f7c96192bdf6b51bb46588a6601196253a5abce083eb8afff793f523dca8f578

    • Size

      1.1MB

    • MD5

      065ab35507815599b533bc5fb5c8843d

    • SHA1

      5ea0410472228936a8574cb900d2ec9b9417e13d

    • SHA256

      f7c96192bdf6b51bb46588a6601196253a5abce083eb8afff793f523dca8f578

    • SHA512

      4866063ea24915de842d844b8b0c802bdb875d6f4d271deb155be074ed8179c676d3063f05f6152a47a19b026cdd8ad9847f3f64ee47946c13b1af5deeebda6f

    • SSDEEP

      24576:YSrIg9yu8nidH4wz4ToE1w9Hq8p8yyX/40QfAjGBd:Nr1enw4m4z1/8p8y+/408Bd

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks