Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/01/2024, 00:06
General
-
Target
733758b4dc495fc5b51ffd41e7b56348.exe
-
Size
401KB
-
MD5
733758b4dc495fc5b51ffd41e7b56348
-
SHA1
cf6cf15df13aff9217e38e9e67d47db19234fa31
-
SHA256
63f39c2be1d5b1376d350682543f2fe63e5060edaab3ba4a6e4b33c80142eab6
-
SHA512
476ddf6d1b4aa1f950481c529ef960aef7e1290a228c39d3996f5e048b23ca223e746e07811663776866377a36e5e79e287e1d5ad0c1ac10db77b7b448c363b2
-
SSDEEP
12288:u/XM4DShe9EcHPLrLZ5AICgkTP3/GHzpE3F:+M4DSs9FvzAICgkTGTu1
Score
7/10
Malware Config
Signatures
-
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
-
Reads local data of messenger clients 2 TTPs
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\733758b4dc495fc5b51ffd41e7b56348.exe"C:\Users\Admin\AppData\Local\Temp\733758b4dc495fc5b51ffd41e7b56348.exe"1⤵