Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

74472b44d4...d8.exe

windows7-x64

7

74472b44d4...d8.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74472b44d4e4c36bf703079278a4d5d8.exe

  • Size

    93KB

  • Sample

    240105-sdnk7aecaj

  • MD5

    74472b44d4e4c36bf703079278a4d5d8

  • SHA1

    a8947ba4763ac770183fca9f79b1a0c49e9ab634

  • SHA256

    d5eebe6c627d0fc713ed10b2d4c0241bb4e38be2d685699a32ddf22d608911cd

  • SHA512

    810728e7d94079350e6b7375270f441517c43bf673e7d998ddb63a6a9a44f858ce4584443b1160ba6eaf717d4a3947902c633482ad1870b7e38dc2be0cba9ed3

  • SSDEEP

    1536:bRVCaKgzbLc54hukfgvYnouy8v4DcV1Ayj4m/QWR/Rlq88vlnRqPR/1aViDRknPa:VjbLl/gvQoutv4DQ1Tj4mYWR/R4nkPRl

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      74472b44d4e4c36bf703079278a4d5d8.exe

    • Size

      93KB

    • MD5

      74472b44d4e4c36bf703079278a4d5d8

    • SHA1

      a8947ba4763ac770183fca9f79b1a0c49e9ab634

    • SHA256

      d5eebe6c627d0fc713ed10b2d4c0241bb4e38be2d685699a32ddf22d608911cd

    • SHA512

      810728e7d94079350e6b7375270f441517c43bf673e7d998ddb63a6a9a44f858ce4584443b1160ba6eaf717d4a3947902c633482ad1870b7e38dc2be0cba9ed3

    • SSDEEP

      1536:bRVCaKgzbLc54hukfgvYnouy8v4DcV1Ayj4m/QWR/Rlq88vlnRqPR/1aViDRknPa:VjbLl/gvQoutv4DQ1Tj4mYWR/R4nkPRl

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks