Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

42c8d6e624...03.exe

windows7-x64

10

42c8d6e624...03.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42c8d6e62450936d2f72ca5446744903

  • Size

    282KB

  • Sample

    240105-fbpn9abbd3

  • MD5

    42c8d6e62450936d2f72ca5446744903

  • SHA1

    56c6ecdfb3e2f4aead73f913fdef1bc929eacf22

  • SHA256

    bff99db18fcc1668218698292bb23e804a7b6abed80af194347785f9db7e59a7

  • SHA512

    aab9e5f27eba15bb49f7c5908b1b08f1c740e5f4dc03cbb738ae73bda4ce8f1f3c5f3f60d23730e5837e240889ee699e763eaf90d5cbb6522d9a7757a12b2c35

  • SSDEEP

    6144:crPrPEYF57R69Um+nEY0kqk4PXzCPamiHtRNCI6X:2PXF9R6ym+skK07mKX

Score
10/10
evasionpersistencespywarestealerupx

Malware Config

Targets

    • Target

      42c8d6e62450936d2f72ca5446744903

    • Size

      282KB

    • MD5

      42c8d6e62450936d2f72ca5446744903

    • SHA1

      56c6ecdfb3e2f4aead73f913fdef1bc929eacf22

    • SHA256

      bff99db18fcc1668218698292bb23e804a7b6abed80af194347785f9db7e59a7

    • SHA512

      aab9e5f27eba15bb49f7c5908b1b08f1c740e5f4dc03cbb738ae73bda4ce8f1f3c5f3f60d23730e5837e240889ee699e763eaf90d5cbb6522d9a7757a12b2c35

    • SSDEEP

      6144:crPrPEYF57R69Um+nEY0kqk4PXzCPamiHtRNCI6X:2PXF9R6ym+skK07mKX

    Score
    10/10
    evasionpersistencespywarestealerupx

    • Modifies security service

      evasion

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks