Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    27s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20230703-en
  • resource tags

    arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2023, 13:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    file.exe

  • Size

    715KB

  • MD5

    1ba71aaeba6e97e0b4101eae85cb6fd1

  • SHA1

    800c305125444909bf5bd0f87aaa9bdf3948fecd

  • SHA256

    659284e5615e553baeceb72ed2f226fda246e40ce0dd0e300514b9afee6d41ca

  • SHA512

    b3e627f5a8cd3454b671300d6c0dfa94f9009abbcde1025c65ab15495180b01290159d02609afddcce166707eda48664afb320229f36ffce9c7636a515ceaf63

  • SSDEEP

    6144:XA01NdzQ/xQWQvYYaE57i1bdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC28Wf7xLUnw+V:XdEJQWQG1bIShtdGxTC2M5JL

Score
10/10
fabookiespywarestealer

Malware Config

Signatures

  • Detect Fabookie payload 2 IoCs
  • Fabookie

    Fabookie is facebook account info stealer.

    spywarestealerfabookie
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
      PID:2296

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2296-56-0x0000000002AA0000-0x0000000002C10000-memory.dmp

      Filesize

      1.4MB

      Download

    • memory/2296-57-0x0000000002C10000-0x0000000002D41000-memory.dmp

      Filesize

      1.2MB

      Download

    • memory/2296-60-0x0000000002C10000-0x0000000002D41000-memory.dmp

      Filesize

      1.2MB

      Download