Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

2c4ae2bb84...dd.exe

windows7-x64

10

2c4ae2bb84...dd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c4ae2bb8418890dcb1418a8777ebddd.exe

  • Size

    2.9MB

  • Sample

    230805-ycc1ysfd81

  • MD5

    2c4ae2bb8418890dcb1418a8777ebddd

  • SHA1

    7553c755559dd811c4a4904203da991accf0d3d6

  • SHA256

    fb553e12381d42a612c713968078424201794a35fd13c681ae7faa77bf18e553

  • SHA512

    fd7c26de8b196288c31d1fd52a86efb0cd0a68321812715dd0a2e133f8433e1cb4f446f517d7e9edbd9ee93c83e21b37d0431cc401e87da8c1397a099a999467

  • SSDEEP

    49152:g4R1oLkfMMMMMO7hBm0ytzuItW8VxiRVw5UjSaKWdhr9GrEzpThyZfjdVWljUunW:gxkfMMMMMOtBmtou2RVw5zEVG41TqfjZ

Score
10/10
sectopratratspywarestealerthemidatrojan

Malware Config

Targets

    • Target

      2c4ae2bb8418890dcb1418a8777ebddd.exe

    • Size

      2.9MB

    • MD5

      2c4ae2bb8418890dcb1418a8777ebddd

    • SHA1

      7553c755559dd811c4a4904203da991accf0d3d6

    • SHA256

      fb553e12381d42a612c713968078424201794a35fd13c681ae7faa77bf18e553

    • SHA512

      fd7c26de8b196288c31d1fd52a86efb0cd0a68321812715dd0a2e133f8433e1cb4f446f517d7e9edbd9ee93c83e21b37d0431cc401e87da8c1397a099a999467

    • SSDEEP

      49152:g4R1oLkfMMMMMO7hBm0ytzuItW8VxiRVw5UjSaKWdhr9GrEzpThyZfjdVWljUunW:gxkfMMMMMOtBmtou2RVw5zEVG41TqfjZ

    Score
    10/10
    sectopratratspywarestealerthemidatrojan

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks