Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

27/10/2023, 05:04

231027-fqdwascc9x 10

27/10/2023, 04:40

231027-fawq6scc3w 10

General

  • Target

    vat.exe

  • Size

    58.6MB

  • Sample

    231027-fawq6scc3w

  • MD5

    6f205fe126a6670fac073cdb71901c0a

  • SHA1

    ad304e9ed1ffbebfbcfc68a6ee3f8b0f133bdf64

  • SHA256

    e6e3bfdae1ede46670d8a8975927897e8c5a285c07347b511afe8f3369b41277

  • SHA512

    f845434aeb01752081d239f2a64f374a2bd122016309fd1cbe212f8ccf8168df4e6e429f74cb63e246bd7f45c9e66b50f2eb6364c22c3c74b6ff8c46df73ccd6

  • SSDEEP

    1572864:LWT1LPDVnpWxq3rYkctmFV1Ga6cbgghbqa9Kbu3bFYF8R0ROt11L9ax8ddBfM7Hv:6T1LP7mlguNLv

Malware Config

Targets

    • Target

      vat.exe

    • Size

      58.6MB

    • MD5

      6f205fe126a6670fac073cdb71901c0a

    • SHA1

      ad304e9ed1ffbebfbcfc68a6ee3f8b0f133bdf64

    • SHA256

      e6e3bfdae1ede46670d8a8975927897e8c5a285c07347b511afe8f3369b41277

    • SHA512

      f845434aeb01752081d239f2a64f374a2bd122016309fd1cbe212f8ccf8168df4e6e429f74cb63e246bd7f45c9e66b50f2eb6364c22c3c74b6ff8c46df73ccd6

    • SSDEEP

      1572864:LWT1LPDVnpWxq3rYkctmFV1Ga6cbgghbqa9Kbu3bFYF8R0ROt11L9ax8ddBfM7Hv:6T1LP7mlguNLv

    Score
    7/10
    • Loads dropped DLL

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks