Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

Cert.exe

windows7-x64

8

Cert.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup.zip

  • Size

    9.7MB

  • Sample

    230630-al1avaff48

  • MD5

    069adf371d0632ec79b4f15d4e2379b8

  • SHA1

    cc7f69bebba6542d5e6b5ffaa9d132b1270719ee

  • SHA256

    09a362f63e5e1f3eb017983e30c179fcfa63346e9a4c999f7e4dcfeba4c05c07

  • SHA512

    d8b9c804a87d8394773f719603a4a0cd6aa0577e60d313103c47378e9f63b8c117096a6e6c58d5029185ef6446a33f31574a5c9f9448245b1052258fb8abb9fb

  • SSDEEP

    196608:XqICbAG1Xla0C6pV8/NU1V5eUlANjQYY5l/C5HefqN0K3YBU7CW/UvLGa:/RGdpfpV8wok1X3qd3YBCCWMTGa

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      Cert.exe

    • Size

      30.2MB

    • MD5

      1c55ea331b42d359fef7e879783f3fd1

    • SHA1

      c13e7c1832c9a555da56ab2db56a83b6b9a31c71

    • SHA256

      fe2a84c778acb2e8fb75037ae61b786800458f1f0dfd9efef4332c63ce64d1ac

    • SHA512

      099bc92e27f2c858af71423b8a8dca41690d73330d4ca67aef7621269267088f9e29c366eb7512764005053276c05ed2b4dacf4a1db12f6c57cd91c001699f6b

    • SSDEEP

      196608:OA9g7bFfMbNfPsB0oAHAJ/AvenhNQ1KLNX:+nBCMB0oaAMen/MWNX

    Score
    8/10
    discoveryspywarestealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks