Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

Jan-statement.exe

windows7-x64

1

Jan-statement.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Jan-statement.exe

  • Size

    1.9MB

  • Sample

    230109-mx8gtahd6v

  • MD5

    2a486fd49ea99742267a7c8aa86947a2

  • SHA1

    967bd75a7d95db517ca8c5285adbc506295e50b1

  • SHA256

    b0a22e9a9850fa4356f5603905f45645489ae04d60d630772b3b8227a21b1956

  • SHA512

    56c8c15d1c9445f08320072cf440fa153488491d7a2643e220cfe3d6609f0ed0c652b3608a64c87ede71ebe55273f4d9991471445ffaa61820c50dd7acc617a2

  • SSDEEP

    24576:GqTCf9W3TunNxmbBMhvEGt2Xfj0jlsmLK+NMixG7dRrLnJUxegZjWLNn0bqS9L+j:1Wf+ImlUvWLm2+NneLJUr6LN0bqS8e1S

Score
10/10
collectiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      Jan-statement.exe

    • Size

      1.9MB

    • MD5

      2a486fd49ea99742267a7c8aa86947a2

    • SHA1

      967bd75a7d95db517ca8c5285adbc506295e50b1

    • SHA256

      b0a22e9a9850fa4356f5603905f45645489ae04d60d630772b3b8227a21b1956

    • SHA512

      56c8c15d1c9445f08320072cf440fa153488491d7a2643e220cfe3d6609f0ed0c652b3608a64c87ede71ebe55273f4d9991471445ffaa61820c50dd7acc617a2

    • SSDEEP

      24576:GqTCf9W3TunNxmbBMhvEGt2Xfj0jlsmLK+NMixG7dRrLnJUxegZjWLNn0bqS9L+j:1Wf+ImlUvWLm2+NneLJUr6LN0bqS8e1S

    Score
    10/10
    collectiondiscoveryspywarestealer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks