Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 02:39
Static task
static1
Behavioral task
behavioral1
Sample
0074370d2aec7f6249d2a8cb11d1c824.exe
Resource
win7-20231129-en
General
-
Target
0074370d2aec7f6249d2a8cb11d1c824.exe
-
Size
222KB
-
MD5
0074370d2aec7f6249d2a8cb11d1c824
-
SHA1
d9fb24d88a42b20720e2ade4a84bc0f0d62acbf7
-
SHA256
35a7f4a0d713bf06c988acb0ca994295e9474a8930866567c6977cd5490616bf
-
SHA512
ae62572237c19eba2507614336f82c092ef6561feea3940823326b4b5a63ccd84103f4ab102dac5b3133753838ab65619f1c2cff1973f1d56c11cdb9852b2e9a
-
SSDEEP
6144:fs87FKuWHL9PBjRgDqf0PJA7MeN3HnHpCHk:lAuWr9PRRguf0+zJCHk
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe 1072 0074370d2aec7f6249d2a8cb11d1c824.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14KB
MD5a5f8399a743ab7f9c88c645c35b1ebb5
SHA1168f3c158913b0367bf79fa413357fbe97018191
SHA256dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
SHA512824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
Filesize
11KB
MD5c17103ae9072a06da581dec998343fc1
SHA1b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA256dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
SHA512d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
Filesize
17KB
MD57d3317f57c1a368480ace3c0ca804eeb
SHA1d4c7e185bc64aac82339f51ba6c21cf0713c9f1a
SHA256d88a04c1e39db583eaad727fd390fe599ab10198ee040bfbdd22daefadbd2372
SHA5125598c2e6caa2f66edd48f8c8305e054d4b0740b5f2b7ed92cf197a13ac66ba99a32013d34b3c2e28d007ab7979eb90a50681324eb736b1410e7df1902e4ec32a