Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

geek.exe

windows7-x64

8

geek.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    geek.exe

  • Size

    6.3MB

  • Sample

    230109-slnadsef54

  • MD5

    234f314f904536e9ea73f52e1f0ffa13

  • SHA1

    430d72aad2930ef28d9270db87bb14260d3e613f

  • SHA256

    7142ba9a0a96e7184d8da2d5514d4416191494cc709f424f924ceb26332171ec

  • SHA512

    24c1e1b85486b49263ef4fdfc34f68f3b0f78f83da77e9a8fc0f8f27b51beaf25d70c64fd07c10e35a2593d359c742759a63c0ff985eea630c0588af96af49f0

  • SSDEEP

    98304:3qJbc5xtz+kl/m5lifMc/PKkuExnaZ/l+7Y1rtJKCg85:6Jk+y/mnifVKkbaZ/l+7Y1rtECg85

Score
8/10
discoverypersistencespywarestealer

Malware Config

Targets

    • Target

      geek.exe

    • Size

      6.3MB

    • MD5

      234f314f904536e9ea73f52e1f0ffa13

    • SHA1

      430d72aad2930ef28d9270db87bb14260d3e613f

    • SHA256

      7142ba9a0a96e7184d8da2d5514d4416191494cc709f424f924ceb26332171ec

    • SHA512

      24c1e1b85486b49263ef4fdfc34f68f3b0f78f83da77e9a8fc0f8f27b51beaf25d70c64fd07c10e35a2593d359c742759a63c0ff985eea630c0588af96af49f0

    • SSDEEP

      98304:3qJbc5xtz+kl/m5lifMc/PKkuExnaZ/l+7Y1rtJKCg85:6Jk+y/mnifVKkbaZ/l+7Y1rtECg85

    Score
    8/10
    discoverypersistencespywarestealer

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks