Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

cb1e76e2e4...c2.exe

windows7-x64

7

cb1e76e2e4...c2.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb1e76e2e4440cff77528730acb73af05e0d9494d41b079b29788fa85c535bc2

  • Size

    25KB

  • Sample

    221203-fjpn8afe33

  • MD5

    39593022f4c2e59b4f958e1956ed9700

  • SHA1

    eb83734fd8320c2512371de55fe823178dccc810

  • SHA256

    cb1e76e2e4440cff77528730acb73af05e0d9494d41b079b29788fa85c535bc2

  • SHA512

    7afac8aa94a1eb1162597623fb9ad7fa1fa40246e0f2900d133c710ab20bc1c57c09c9cdd91ca37d38da5a0b68241ede5a4afaa6199d7ee9f8a7ab13568591fe

  • SSDEEP

    768:qIjOGb7c/CHBYUeXqHs+bGcLaVpJKA/eF:q1j/CqTXqbFapJKr

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      cb1e76e2e4440cff77528730acb73af05e0d9494d41b079b29788fa85c535bc2

    • Size

      25KB

    • MD5

      39593022f4c2e59b4f958e1956ed9700

    • SHA1

      eb83734fd8320c2512371de55fe823178dccc810

    • SHA256

      cb1e76e2e4440cff77528730acb73af05e0d9494d41b079b29788fa85c535bc2

    • SHA512

      7afac8aa94a1eb1162597623fb9ad7fa1fa40246e0f2900d133c710ab20bc1c57c09c9cdd91ca37d38da5a0b68241ede5a4afaa6199d7ee9f8a7ab13568591fe

    • SSDEEP

      768:qIjOGb7c/CHBYUeXqHs+bGcLaVpJKA/eF:q1j/CqTXqbFapJKr

    Score
    7/10
    discoveryspywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks