Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    5.6MB

  • Sample

    230613-spk97sgg78

  • MD5

    91e0018d00f5782c53d8d0a5abc51914

  • SHA1

    24733e9f058ef81884085eeab0bbe32582775fee

  • SHA256

    4e998800b102360f87df8e0d379ace3ba4981f8fc158f1c88c30f494463994a5

  • SHA512

    eebfd3435d2105f7a9a3bc369c34c8c061813e4f9a5a7056824c9d37ef641d30e67b6fe75c0d395a440623635f0b5a56f6380b75f0287ba9e647992d0cc0d36e

  • SSDEEP

    98304:EDLrpHFOFnyavj0un+/crK8qfB8nzhF1GHdlpG6LVmrV9kpfBqD8m/d4ky3jmlWp:Evr9FO5cu+/KK8qfBwdF1QlpGq0x+/sC

Score
10/10
privateloaderdiscoveryloaderspywarestealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      5.6MB

    • MD5

      91e0018d00f5782c53d8d0a5abc51914

    • SHA1

      24733e9f058ef81884085eeab0bbe32582775fee

    • SHA256

      4e998800b102360f87df8e0d379ace3ba4981f8fc158f1c88c30f494463994a5

    • SHA512

      eebfd3435d2105f7a9a3bc369c34c8c061813e4f9a5a7056824c9d37ef641d30e67b6fe75c0d395a440623635f0b5a56f6380b75f0287ba9e647992d0cc0d36e

    • SSDEEP

      98304:EDLrpHFOFnyavj0un+/crK8qfB8nzhF1GHdlpG6LVmrV9kpfBqD8m/d4ky3jmlWp:Evr9FO5cu+/KK8qfBwdF1QlpGq0x+/sC

    Score
    10/10
    privateloaderdiscoveryloaderspywarestealer

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks