Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c24601317a...b8.exe

windows7-x64

10

c24601317a...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c24601317ac7790b94552d94d91e93b8.bin

  • Size

    198KB

  • Sample

    230505-x5ngqabc7z

  • MD5

    c24601317ac7790b94552d94d91e93b8

  • SHA1

    5360294d421ce78a701fe14f2ac40376a6900bd4

  • SHA256

    e8c370012027c85f0ef910fa25385d8e8652df038cb9ac71294fc744334b215e

  • SHA512

    5c525b6838058cad8eedc78fb2dd277c76561f286ffa7a8cd36214f071cb4c3793f7d59190a1c7b83c996afb5344dc480d62de4541d47cf8399aaeea85966ca0

  • SSDEEP

    3072:x81f/IOU5/r2RF9gb4Lp3p4dil/c0wbXODCJ8wU5MTnqIH+ejcNC:Kh/LA09yspZKuE7XOAHBTnqecN

Score
10/10
evasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      c24601317ac7790b94552d94d91e93b8.bin

    • Size

      198KB

    • MD5

      c24601317ac7790b94552d94d91e93b8

    • SHA1

      5360294d421ce78a701fe14f2ac40376a6900bd4

    • SHA256

      e8c370012027c85f0ef910fa25385d8e8652df038cb9ac71294fc744334b215e

    • SHA512

      5c525b6838058cad8eedc78fb2dd277c76561f286ffa7a8cd36214f071cb4c3793f7d59190a1c7b83c996afb5344dc480d62de4541d47cf8399aaeea85966ca0

    • SSDEEP

      3072:x81f/IOU5/r2RF9gb4Lp3p4dil/c0wbXODCJ8wU5MTnqIH+ejcNC:Kh/LA09yspZKuE7XOAHBTnqecN

    Score
    10/10
    evasionpersistencetrojanspywarestealer

    • Modifies visibility of file extensions in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks