Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

17/07/2023, 10:14

230717-l9sfpaca21 10

16/07/2023, 10:29

230716-mjebtafb51 10

General

  • Target

    SpaceVoid.exe

  • Size

    61.9MB

  • Sample

    230717-l9sfpaca21

  • MD5

    d9c4f753f1ddc4f8c8f522a62658df6b

  • SHA1

    e1e03d21582cdf0b549cc743b296f306bd84cbb6

  • SHA256

    67f86d940e8e8eb73c09c9b37bef9248ed7e0ee0ec317fc118678ad44f69a63e

  • SHA512

    5741ab51d480632499b0ab9d8818435862f161bce916468d8d6f47f743af31f6a4577a18034bbdb824f722cecdcbc167ff74100cab105f113eec3420f891efcc

  • SSDEEP

    1572864:Mm6Fbg6Q7H8JiJK9Uvi8wI4kbLoXKrshom3/bIGlagM7:36Fc6GH8BianJwU6pm35lagM7

Score
10/10

Malware Config

Targets

    • Target

      SpaceVoid.exe

    • Size

      61.9MB

    • MD5

      d9c4f753f1ddc4f8c8f522a62658df6b

    • SHA1

      e1e03d21582cdf0b549cc743b296f306bd84cbb6

    • SHA256

      67f86d940e8e8eb73c09c9b37bef9248ed7e0ee0ec317fc118678ad44f69a63e

    • SHA512

      5741ab51d480632499b0ab9d8818435862f161bce916468d8d6f47f743af31f6a4577a18034bbdb824f722cecdcbc167ff74100cab105f113eec3420f891efcc

    • SSDEEP

      1572864:Mm6Fbg6Q7H8JiJK9Uvi8wI4kbLoXKrshom3/bIGlagM7:36Fc6GH8BianJwU6pm35lagM7

    Score
    10/10
    • Detects EpsilonStealer ASAR

    • Epsilon Stealer

      Information stealer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks