Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

84e2e7faed...ex.exe

windows7-x64

10

84e2e7faed...ex.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84e2e7faedbce5exeexeexeex.exe

  • Size

    535KB

  • Sample

    230709-h8ampsbh7t

  • MD5

    84e2e7faedbce52fce12a1643392bc13

  • SHA1

    183b8ec813f30559331aab70073f90936b1705ec

  • SHA256

    c53d6d7b9966140cfbc0f13f1a1ef9858082c3f7135a7f05c0fe9a637be2679e

  • SHA512

    ccd6f325e330ed7fd603f5f5a2851e14f3faa57d1a82b999ebb6cce5f0d65340821718b707a22d429833a694dfad21c1d4a714b512a8d431520e0b6558c265cf

  • SSDEEP

    12288:eftxYeHF9lYXwuz50XTxXtYmqof5YbbTXUrZ:ElYXMXT1tn15iX

Score
10/10
evasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      84e2e7faedbce5exeexeexeex.exe

    • Size

      535KB

    • MD5

      84e2e7faedbce52fce12a1643392bc13

    • SHA1

      183b8ec813f30559331aab70073f90936b1705ec

    • SHA256

      c53d6d7b9966140cfbc0f13f1a1ef9858082c3f7135a7f05c0fe9a637be2679e

    • SHA512

      ccd6f325e330ed7fd603f5f5a2851e14f3faa57d1a82b999ebb6cce5f0d65340821718b707a22d429833a694dfad21c1d4a714b512a8d431520e0b6558c265cf

    • SSDEEP

      12288:eftxYeHF9lYXwuz50XTxXtYmqof5YbbTXUrZ:ElYXMXT1tn15iX

    Score
    10/10
    evasionpersistencespywarestealertrojan

    • Modifies visibility of file extensions in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks