Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

f16ca2056d...b4.exe

windows7-x64

7

f16ca2056d...b4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dc7d0b6fd6bd2e157f3be4b6b20fe4d.bin

  • Size

    14.2MB

  • Sample

    240122-bc3kaadadq

  • MD5

    a2aaa4a349ae936f89b3a7de8637bffe

  • SHA1

    2f700d120ae1bbaf1195661db4cd49ba3ef227e1

  • SHA256

    c87a5710a24435b53aa79106b6b735aab4cec83810cb7e84c8046a0c9a8c56f9

  • SHA512

    8516c1546e073da07f4db6e9c4ff822ba00675df5c68b81b8bb395f750f83f5e2c8c46cdc6393ad35a7e7896e8e58734fc2827e21e354f57b369aca872b854b2

  • SSDEEP

    196608:d7llDeo2DRdeDOZjr9IhT1g+feHbLiWeNNuCtJpIZtXw3sHDsuRvT0VuBDLe63ul:tTDstcDO1KZKtHP70IohueEDLe63ul

Score
10/10
crealstealerpyinstallerspywarestealer

Malware Config

Targets

    • Target

      f16ca2056d872f1cae446a151e057fe1d5744f6f26889881050f254008c5a5b4.exe

    • Size

      14.4MB

    • MD5

      0dc7d0b6fd6bd2e157f3be4b6b20fe4d

    • SHA1

      5784f5beb1cd3b5aa222aaf0484c52547d5759a5

    • SHA256

      f16ca2056d872f1cae446a151e057fe1d5744f6f26889881050f254008c5a5b4

    • SHA512

      8274ba73140c6c1b7005ae3fbc84f320e1e7181d12507518ba8a6854d02ceeecfca314378c8247e9bc30c85ecd4f159e15774f5fa2f8362a5911c14fd3c69160

    • SSDEEP

      393216:qiIE7YoPQPdQuslSq99oWOv+9fg/kMeTl2Y:T7rPQPdQuSDorvSY/k/l

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks