Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

e389f8d999...42.exe

windows7-x64

8

e389f8d999...42.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e389f8d99936daf9f29d221feeb0872e2105fe42

  • Size

    1.4MB

  • Sample

    230106-xns1wahh92

  • MD5

    4a205e1cb6f3fe068df7ae9fa1b174bc

  • SHA1

    e389f8d99936daf9f29d221feeb0872e2105fe42

  • SHA256

    d4a8cd1afe16b614f4edc31c747e1c62535fe24ee6fe0a7b8fbc6336d19562f8

  • SHA512

    14ff59baa6999c580d72b096f9d38cb80a4a921fb8f5d39eaf101a164845587c6e5206585f777497d89c5bf0d42212b633f18ddfb1f2d2244d3ef031837ae767

  • SSDEEP

    12288:A8yEuzIL77tU46T5/je3nIJFTdrOAZmbf9al1LMPAjbjF0yNhG4NcOF648khDlQI:wzXddS8uWQsfQbCUSio

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      e389f8d99936daf9f29d221feeb0872e2105fe42

    • Size

      1.4MB

    • MD5

      4a205e1cb6f3fe068df7ae9fa1b174bc

    • SHA1

      e389f8d99936daf9f29d221feeb0872e2105fe42

    • SHA256

      d4a8cd1afe16b614f4edc31c747e1c62535fe24ee6fe0a7b8fbc6336d19562f8

    • SHA512

      14ff59baa6999c580d72b096f9d38cb80a4a921fb8f5d39eaf101a164845587c6e5206585f777497d89c5bf0d42212b633f18ddfb1f2d2244d3ef031837ae767

    • SSDEEP

      12288:A8yEuzIL77tU46T5/je3nIJFTdrOAZmbf9al1LMPAjbjF0yNhG4NcOF648khDlQI:wzXddS8uWQsfQbCUSio

    Score
    8/10
    spywarestealer

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks