Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

process.exe

windows7-x64

8

process.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    process.exe

  • Size

    258KB

  • Sample

    230106-x9qgwabb82

  • MD5

    4b845f07de6d5d8ad72a57d9169f69be

  • SHA1

    cfec4bce14ce9c85350f8f943c1ab8068be9e42b

  • SHA256

    0dd112b4f23ce4ad0d6619dc2686b58f686ad47509c4e9a66b045a7385ebda64

  • SHA512

    b15b8b57ea5bdbbb4f1fda0036560d1f0ee89d0122dac92ddd816897312fd5d6c0219e7898d85a88649283790887ef74fa5b317cdf1cb6452fb9484f441854fe

  • SSDEEP

    6144:4I4vO0B+oVTIn0UAaH0neolFc6hoPnJEdRcgY5STm:yvpBRBInQ7bc6hMJEdRcgY

Score
8/10
adwareevasionstealer

Malware Config

Targets

    • Target

      process.exe

    • Size

      258KB

    • MD5

      4b845f07de6d5d8ad72a57d9169f69be

    • SHA1

      cfec4bce14ce9c85350f8f943c1ab8068be9e42b

    • SHA256

      0dd112b4f23ce4ad0d6619dc2686b58f686ad47509c4e9a66b045a7385ebda64

    • SHA512

      b15b8b57ea5bdbbb4f1fda0036560d1f0ee89d0122dac92ddd816897312fd5d6c0219e7898d85a88649283790887ef74fa5b317cdf1cb6452fb9484f441854fe

    • SSDEEP

      6144:4I4vO0B+oVTIn0UAaH0neolFc6hoPnJEdRcgY5STm:yvpBRBInQ7bc6hMJEdRcgY

    Score
    8/10
    adwareevasionstealer

    • Stops running service(s)

      evasion

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks