Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
263KB
-
Sample
230919-yj82zadg86
-
MD5
c9f9d6a09b47de9b71288bccce070376
-
SHA1
b9352e434ab239609c62f6e61bc83e9ca64d1120
-
SHA256
046c29b9d4f755cfe374d52418917670c2a076f475269563e7bc69bc4a2a7c96
-
SHA512
17d6dc9e83070956f43659545b86696543d16b81ac0400e02e2a911177ee348e2fcfe6b405eaf7f7fa392a7eb01e4ee2dbe87fbe46d441fdda62633f4a01eea0
-
SSDEEP
3072:cNXU9uzBmnL+zTvIGmgf9dA+NNxCnfbdzfaMw+j:0RBKL+zTvIGmgf968MnBzfjw
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
Malware Config
Extracted
stealc
http://bryanzachary.top
-
url_path
/e9c345fc99a4e67e.php
Targets
-
-
Target
file.exe
-
Size
263KB
-
MD5
c9f9d6a09b47de9b71288bccce070376
-
SHA1
b9352e434ab239609c62f6e61bc83e9ca64d1120
-
SHA256
046c29b9d4f755cfe374d52418917670c2a076f475269563e7bc69bc4a2a7c96
-
SHA512
17d6dc9e83070956f43659545b86696543d16b81ac0400e02e2a911177ee348e2fcfe6b405eaf7f7fa392a7eb01e4ee2dbe87fbe46d441fdda62633f4a01eea0
-
SSDEEP
3072:cNXU9uzBmnL+zTvIGmgf9dA+NNxCnfbdzfaMw+j:0RBKL+zTvIGmgf968MnBzfjw
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-