Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

7dca194b23...b2.exe

windows7-x64

7

7dca194b23...b2.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7dca194b23c89968e760d821da99e6b2

  • Size

    363KB

  • Sample

    231226-vaej8achhl

  • MD5

    7dca194b23c89968e760d821da99e6b2

  • SHA1

    37e60b60edecb76a36b479ac40cb4f3dcf9d84e6

  • SHA256

    c42416f4ea7582b96fef44030d7329d08a788723b9110ccd6f367d94b6f094d2

  • SHA512

    9c5823086ed8c459444d4998f22a1661a283032c9d726de4795eb8580fbec17fbe6c3343fdbfb7b80c813c631761e9893058a6bfa470adaf5dffdd141bf3798b

  • SSDEEP

    6144:hGDow9eppgO5qRks6YOTpcnirF7B+qlcUrxcqUOLSTW/bKAOGLDswENTGZkPj+gN:h/w9efjQkWOTWnsF71zNc5O+TW/bKnGy

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      7dca194b23c89968e760d821da99e6b2

    • Size

      363KB

    • MD5

      7dca194b23c89968e760d821da99e6b2

    • SHA1

      37e60b60edecb76a36b479ac40cb4f3dcf9d84e6

    • SHA256

      c42416f4ea7582b96fef44030d7329d08a788723b9110ccd6f367d94b6f094d2

    • SHA512

      9c5823086ed8c459444d4998f22a1661a283032c9d726de4795eb8580fbec17fbe6c3343fdbfb7b80c813c631761e9893058a6bfa470adaf5dffdd141bf3798b

    • SSDEEP

      6144:hGDow9eppgO5qRks6YOTpcnirF7B+qlcUrxcqUOLSTW/bKAOGLDswENTGZkPj+gN:h/w9efjQkWOTWnsF71zNc5O+TW/bKnGy

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks