Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

SublimeText4.zip

windows10-1703-x64

8

SublimeText4.zip

windows7-x64

8

SublimeText4.zip

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SublimeText4.zip

  • Size

    8.7MB

  • Sample

    230106-tpem4ahb58

  • MD5

    fec9ce0c54cf19606555b133dda68a70

  • SHA1

    e3c9e92454c454baf9c9bde9ad59f8080e7bbe0a

  • SHA256

    e2e202fda0ca462db8c71225a76c177dfb28a5da0fc8993de3ec5d9aae9f98b0

  • SHA512

    99bbd09937e7b2b4ff05dbf1f1480b587a5644025b35e07fff0ef3c48a6e7418bb1d4a10d9d9fb3f9870a98fe84f5da6871cfa186f8776094f94163d59e3f5a3

  • SSDEEP

    196608:xyIpHnwUY1kYg8qxPYUt7I/Re6C6Bm4qmFiPGRQpg5UkC:xpvK9n/mhmgPGRQyykC

Score
8/10
collectiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      SublimeText4.zip

    • Size

      8.7MB

    • MD5

      fec9ce0c54cf19606555b133dda68a70

    • SHA1

      e3c9e92454c454baf9c9bde9ad59f8080e7bbe0a

    • SHA256

      e2e202fda0ca462db8c71225a76c177dfb28a5da0fc8993de3ec5d9aae9f98b0

    • SHA512

      99bbd09937e7b2b4ff05dbf1f1480b587a5644025b35e07fff0ef3c48a6e7418bb1d4a10d9d9fb3f9870a98fe84f5da6871cfa186f8776094f94163d59e3f5a3

    • SSDEEP

      196608:xyIpHnwUY1kYg8qxPYUt7I/Re6C6Bm4qmFiPGRQpg5UkC:xpvK9n/mhmgPGRQyykC

    Score
    8/10
    collectiondiscoveryspywarestealer

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v6

Tasks