Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cbeb8a1dc9...a8.exe

windows7-x64

10

cbeb8a1dc9...a8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cbeb8a1dc9c1cc99182866d178ecaea8.bin

  • Size

    189KB

  • Sample

    230505-yb4saaca7w

  • MD5

    cbeb8a1dc9c1cc99182866d178ecaea8

  • SHA1

    4fed98767f06ef15b165c4baa69ac9adfbcfc794

  • SHA256

    f94a87a6b2201c05a4222db550ce2ea96991165ee8b3c25af7bfeb5a8bbd8d51

  • SHA512

    0b46422897e1e0302fc29e3a7625fea0b929eefc4ca506616bc7456596e8520bfb047aaa73baf304991bddb6dfca6bf93673b5738555ad40e00f8ee6d60d80b5

  • SSDEEP

    3072:TxoZBytUbHRMDHJA8rXlm+TjeVfsHSz26jk:FoZB+Uj8X4+6sHSi6jk

Score
10/10
evasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      cbeb8a1dc9c1cc99182866d178ecaea8.bin

    • Size

      189KB

    • MD5

      cbeb8a1dc9c1cc99182866d178ecaea8

    • SHA1

      4fed98767f06ef15b165c4baa69ac9adfbcfc794

    • SHA256

      f94a87a6b2201c05a4222db550ce2ea96991165ee8b3c25af7bfeb5a8bbd8d51

    • SHA512

      0b46422897e1e0302fc29e3a7625fea0b929eefc4ca506616bc7456596e8520bfb047aaa73baf304991bddb6dfca6bf93673b5738555ad40e00f8ee6d60d80b5

    • SSDEEP

      3072:TxoZBytUbHRMDHJA8rXlm+TjeVfsHSz26jk:FoZB+Uj8X4+6sHSi6jk

    Score
    10/10
    evasionpersistencetrojanspywarestealer

    • Modifies visibility of file extensions in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks