1378ed83b6a3526c87187ffbb78092ae850bb52183d7eaf9e0be2537cf181971 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

081207b47e...61.exe

windows7-x64

7

081207b47e...61.exe

windows10-2004-x64

7

Analysis

max time kernel
152s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 17:19

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

081207b47ea25924fb144ad7396fa261.exe

Resource

win7-20231215-en

spyware stealer

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

081207b47ea25924fb144ad7396fa261.exe

Resource

win10v2004-20231215-en

spyware stealer

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

081207b47ea25924fb144ad7396fa261.exe
Size

544KB
MD5

081207b47ea25924fb144ad7396fa261
SHA1

22bca371c938776dc9b59b6d5a471e2900b19bb1
SHA256

1378ed83b6a3526c87187ffbb78092ae850bb52183d7eaf9e0be2537cf181971
SHA512

9fdec4effe59636c11780e2accc15c914ccb046fa69ee7dfe5a1effd60bc01ba1e3386a5ec03aec8d7d29b38d84e6409a162f6e074f77ba577514099c251304c
SSDEEP

12288:fJBDn7/o5rrBb4pLmadg5rixchdwr3DFBu0:fnnDmCmaQGxc7u3D7

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Processes

C:\Users\Admin\AppData\Local\Temp\081207b47ea25924fb144ad7396fa261.exe
"C:\Users\Admin\AppData\Local\Temp\081207b47ea25924fb144ad7396fa261.exe"
1⤵
PID:2804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\UA4D9.tmp\UNTA4DA.tmp.exe

Filesize
2KB

MD5
84b002607a1e56dbdc57a21f2a3938e3

SHA1
6c6a05d860484eea9c8a1f8fe35ddccd67e7c672

SHA256
2bf8c9c7de4e643a7734700e0d133be0962d58c6d9505639fe0b2cf261f4151b

SHA512
4cecf9dba7cab9766183a0329146b8902a27943812f778e40cf9fa245764c4d2ea6684698aa62fdd86a99d15ca1e9b8575722d79c1a57872c3d200acbf3f5a03

Download Submit
C:\Users\Admin\AppData\Local\Temp\UA4DB.tmp\UNTA4DC.tmp.exe

Filesize
8KB

MD5
40e50e7cac940e3a5e96d5cb89db9807

SHA1
1121012ff6aa6e6725aa235e9d98ebe0d4a7db27

SHA256
4df2f12a786ee62657bbd0c788737e856241e028feaadfe57fc18c09a569e041

SHA512
81d2b7c996fe48a760d470aa87bd940024d6a6736c0c6877d155b7aafdb943cb44860049c8b77b191182921ed09e8cddf44cf46d4f05bf27400c1ba569c251b7

Download Submit
C:\Users\Admin\AppData\Local\Temp\UA4DD.tmp\UNTA4DE.tmp.exe

Filesize
3KB

MD5
3c5d456de2e7cfbab7179ca38a7724a4

SHA1
c8ee42dcb3cbac342dedf6210b2e028c9a989d65

SHA256
4538584c350e3701ffc3d6147b6054cafa01898168371445bc12db995b9dca6c

SHA512
8ec1f5799ff6456bbd3cb4e599c755ba7885b17023ec4300caaef9df7738f231893c4a8531efca4a39a60449f03ad7ce34cff13bc4a0b7093bf1c8564182864a

Download Submit

© 2018-2025

Terms | Privacy