Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

aeb208cb0a...4a.exe

windows7-x64

8

aeb208cb0a...4a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aeb208cb0a41ae6453508c12e2873b0f8079da89c10bf8735e0d2b4d4ead184a

  • Size

    817KB

  • Sample

    221206-yl2qnsha24

  • MD5

    fda22cca531a5955a7bc7302661e020a

  • SHA1

    74bf8f5188f32d9663dc13c72f7a10d280317dfb

  • SHA256

    aeb208cb0a41ae6453508c12e2873b0f8079da89c10bf8735e0d2b4d4ead184a

  • SHA512

    a0d167b0e244766dc08ab076cf88b221301c0cb61bcfaa7f11da86c1b379050179019a3644b3e00ab48e4a09e9eab74cada7153f91dece78b9cc1cd2085b6f2f

  • SSDEEP

    24576:U5ZHwdBltEgsKrp58UThku0SuEU+Y/TEd:UXHw9KgssdD05rTE

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      aeb208cb0a41ae6453508c12e2873b0f8079da89c10bf8735e0d2b4d4ead184a

    • Size

      817KB

    • MD5

      fda22cca531a5955a7bc7302661e020a

    • SHA1

      74bf8f5188f32d9663dc13c72f7a10d280317dfb

    • SHA256

      aeb208cb0a41ae6453508c12e2873b0f8079da89c10bf8735e0d2b4d4ead184a

    • SHA512

      a0d167b0e244766dc08ab076cf88b221301c0cb61bcfaa7f11da86c1b379050179019a3644b3e00ab48e4a09e9eab74cada7153f91dece78b9cc1cd2085b6f2f

    • SSDEEP

      24576:U5ZHwdBltEgsKrp58UThku0SuEU+Y/TEd:UXHw9KgssdD05rTE

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks