Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
13d1288f5f5dadc4d49dff4d49892b99.exe
-
Size
236KB
-
Sample
230419-vf9bsacb47
-
MD5
13d1288f5f5dadc4d49dff4d49892b99
-
SHA1
e8fc4fb65025490a156bfc0b955b38ec164895cc
-
SHA256
b2aca143071281b281d2d8c9898dfd8bae8b1951b5687429b6898d0206dc3294
-
SHA512
7c4041021df3b0cf8cf768ed6bc5ce7bcf551df8501d1ce51aaeed3937faf80f311bfb8ce98a33bcbee3197ef0760762ea92311fd879dc668bb993494eee8c16
-
SSDEEP
3072:1Jxw83fKXce8NNt9Gz9VF2Cxocnibrz4qrxHKzrjyzh5fJ9o3e1eAwYPDpJKJRfC:Fw8g+/G4AUIqMjyzbJ9o3e1eVYPDWJ4
Static task
static1
Behavioral task
behavioral1
Sample
13d1288f5f5dadc4d49dff4d49892b99.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
13d1288f5f5dadc4d49dff4d49892b99.exe
-
Size
236KB
-
MD5
13d1288f5f5dadc4d49dff4d49892b99
-
SHA1
e8fc4fb65025490a156bfc0b955b38ec164895cc
-
SHA256
b2aca143071281b281d2d8c9898dfd8bae8b1951b5687429b6898d0206dc3294
-
SHA512
7c4041021df3b0cf8cf768ed6bc5ce7bcf551df8501d1ce51aaeed3937faf80f311bfb8ce98a33bcbee3197ef0760762ea92311fd879dc668bb993494eee8c16
-
SSDEEP
3072:1Jxw83fKXce8NNt9Gz9VF2Cxocnibrz4qrxHKzrjyzh5fJ9o3e1eAwYPDpJKJRfC:Fw8g+/G4AUIqMjyzbJ9o3e1eVYPDWJ4
-
Detects Stealc stealer
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-