Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

c04bd9cb31...4c.exe

windows7-x64

10

c04bd9cb31...4c.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c04bd9cb313c537fc1f9dd07e1f18d76d29f5ec60216be1abede232a4e34ad4c

  • Size

    136KB

  • Sample

    221205-g9lkxshf4v

  • MD5

    80f05cd8c9d4b621e0d2dd8a83f8051f

  • SHA1

    4a6eedc936a079d16b746f5436916db6b86a4209

  • SHA256

    c04bd9cb313c537fc1f9dd07e1f18d76d29f5ec60216be1abede232a4e34ad4c

  • SHA512

    ed0f2e90b166fa4cf757f234cdf978263d76b4b12c6ba0d0f3c4fd4aba078940f0aabad46b998ad6fb4622468890f70eaf66a907e10b70ae67634056f5c0dbe9

  • SSDEEP

    3072:ole+/KYkGQWSX5QAdMomGdP3xxS1m0FRbZSqpqcSx2ANeZZS5:onFkBJQuMomGdfPgb1qt3wS5

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      c04bd9cb313c537fc1f9dd07e1f18d76d29f5ec60216be1abede232a4e34ad4c

    • Size

      136KB

    • MD5

      80f05cd8c9d4b621e0d2dd8a83f8051f

    • SHA1

      4a6eedc936a079d16b746f5436916db6b86a4209

    • SHA256

      c04bd9cb313c537fc1f9dd07e1f18d76d29f5ec60216be1abede232a4e34ad4c

    • SHA512

      ed0f2e90b166fa4cf757f234cdf978263d76b4b12c6ba0d0f3c4fd4aba078940f0aabad46b998ad6fb4622468890f70eaf66a907e10b70ae67634056f5c0dbe9

    • SSDEEP

      3072:ole+/KYkGQWSX5QAdMomGdP3xxS1m0FRbZSqpqcSx2ANeZZS5:onFkBJQuMomGdfPgb1qt3wS5

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks