Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
13/10/2023, 04:43
General
-
Target
loader.exe
-
Size
10KB
-
MD5
c49f6d78f0e5b1d98b3dacf20b89e2d8
-
SHA1
b13510718cdb5a0ad80dbfa655757ba7e2ba74a8
-
SHA256
6bf4e270ba0f2e6c953bd7998150d8e8f01737fb2b0cd4febc2a6ff98d950f92
-
SHA512
5f931a5e2e73becdd53c2a54e625b6b622a2c5f753ea8ea76bbc1e241563b4983082c3fbe68d3ab506134050de5209f306585be53da602030a0227ba0fab6c2c
-
SSDEEP
192:eqHQc3qHzUE7EUB+NcV6rRs9RwuLQYquEAd4iuu:vwFzr7EULUy9R1QYqw4iuu
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
Processes
-
C:\Users\Admin\AppData\Local\Temp\loader.exe"C:\Users\Admin\AppData\Local\Temp\loader.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
699KB
MD5f44e49092c4d755edb1d1d9bd8eb0261
SHA1e9f68c8d070b184e05337ada36c482bf760358c6
SHA256246ba481ba575e96b49a5559646f614e8e1ec4941fe111f4736cda23677e6ec8
SHA5120d12a62189bff8653b0229134cdd22dbf0ba57e66c9b2a7bb5427d07f43501d86b15c55962dd17f71f32dc1186b995433e0fed57019d9d0337a6012267f9a7d4
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
52KB