Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

Noteppad_S...64.exe

windows7-x64

8

Noteppad_S...64.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Noteppad_SettupX32iX64.exe

  • Size

    6.3MB

  • Sample

    221230-drxcxsab3y

  • MD5

    6d9f7b051a734c7029f67d51e5038bbd

  • SHA1

    916ffa3b7b9815d7941a6a3c47a95469a0092b2e

  • SHA256

    d719df850d62a455d34bf2a5847b36e6d267047824b2e96b7c4c9cdfbd9737e3

  • SHA512

    8286513227e83fda02040cd39aee177a3b33e9fced3e7deed5caf7035ced698712618644a13c518f3545bc7b583edcd3d88ad78a1a9cd36bdcbad9d540d35b5f

  • SSDEEP

    196608:mTQb8bQ8VhcpciM1rr5bgYFTNZXdSNSI:mTO8c2cBMx9cwDt

Score
8/10
collectiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      Noteppad_SettupX32iX64.exe

    • Size

      6.3MB

    • MD5

      6d9f7b051a734c7029f67d51e5038bbd

    • SHA1

      916ffa3b7b9815d7941a6a3c47a95469a0092b2e

    • SHA256

      d719df850d62a455d34bf2a5847b36e6d267047824b2e96b7c4c9cdfbd9737e3

    • SHA512

      8286513227e83fda02040cd39aee177a3b33e9fced3e7deed5caf7035ced698712618644a13c518f3545bc7b583edcd3d88ad78a1a9cd36bdcbad9d540d35b5f

    • SSDEEP

      196608:mTQb8bQ8VhcpciM1rr5bgYFTNZXdSNSI:mTO8c2cBMx9cwDt

    Score
    8/10
    collectiondiscoveryspywarestealer

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks