Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

d9Vgf29ner...qA.msi

windows7-x64

8

d9Vgf29ner...qA.msi

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9Vgf29nerQfhbtSYgKBaILG12pCCq36ul1GPu_xcqA.bin

  • Size

    1.5MB

  • Sample

    230418-1xqhwsef49

  • MD5

    015e07c79c3462250acb001c0b7eaf62

  • SHA1

    a5209bebdf0940741c9ea3622e5ada235f31b970

  • SHA256

    77d5607f6f677ab41f85bb526202816882c6d76a420aadfaba5d463eefb172a0

  • SHA512

    ce30f9f51300774d2c10652f5b5683ab38304eac6adac60d4081b992a8883cead341ecd98f21d631f6737e1e6dd94f83450533a3a5222957ca4cba1a0fcb51b0

  • SSDEEP

    24576:0I5dnY5Ame5l+EHqO+aqO+uqM6erBwCQgtEV9NLQKmGKlXyffAAAKLoGOh+Lx3Bv:N5dnY5AxvHqO+ZO+uqMTnQgtEV9NLQKd

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      d9Vgf29nerQfhbtSYgKBaILG12pCCq36ul1GPu_xcqA.bin

    • Size

      1.5MB

    • MD5

      015e07c79c3462250acb001c0b7eaf62

    • SHA1

      a5209bebdf0940741c9ea3622e5ada235f31b970

    • SHA256

      77d5607f6f677ab41f85bb526202816882c6d76a420aadfaba5d463eefb172a0

    • SHA512

      ce30f9f51300774d2c10652f5b5683ab38304eac6adac60d4081b992a8883cead341ecd98f21d631f6737e1e6dd94f83450533a3a5222957ca4cba1a0fcb51b0

    • SSDEEP

      24576:0I5dnY5Ame5l+EHqO+aqO+uqM6erBwCQgtEV9NLQKmGKlXyffAAAKLoGOh+Lx3Bv:N5dnY5AxvHqO+ZO+uqMTnQgtEV9NLQKd

    Score
    8/10
    spywarestealer

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks