Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    psxcheats.exe

  • Size

    17.8MB

  • Sample

    230301-ve6jhahb57

  • MD5

    76dc51457a82afaa4935e9ce88db4542

  • SHA1

    68eefc8cfa2d8222e6abe928d91883bf09aba44e

  • SHA256

    65d00bbd9548e167725f415057cc68c85a6018f33a570e07f2e741d8c4f7030e

  • SHA512

    0da36e12abcf07162c7ebd6e5a6a31eba49d7f0e4c6cb0e938e6e4b4f343e3eb9734a4dcfe91a0ff73d6939571801337e17a1d64d33ea3e31a14f44ee87f0b9c

  • SSDEEP

    393216:Uu7L/dWBb+4hQz9QDD8CEDd/m3pCZkVRiEFT7b2jTQq:UCL0N+46hCEDdKCZkVRiS7UEq

Malware Config

Targets

    • Target

      psxcheats.exe

    • Size

      17.8MB

    • MD5

      76dc51457a82afaa4935e9ce88db4542

    • SHA1

      68eefc8cfa2d8222e6abe928d91883bf09aba44e

    • SHA256

      65d00bbd9548e167725f415057cc68c85a6018f33a570e07f2e741d8c4f7030e

    • SHA512

      0da36e12abcf07162c7ebd6e5a6a31eba49d7f0e4c6cb0e938e6e4b4f343e3eb9734a4dcfe91a0ff73d6939571801337e17a1d64d33ea3e31a14f44ee87f0b9c

    • SSDEEP

      393216:Uu7L/dWBb+4hQz9QDD8CEDd/m3pCZkVRiEFT7b2jTQq:UCL0N+46hCEDdKCZkVRiS7UEq

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks