Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-18...ia.exe

windows7-x64

7

2024-02-18...ia.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-18_f0987a0168fdac786f0df74f88750672_mafia

  • Size

    727KB

  • Sample

    240218-jq4nhaga96

  • MD5

    f0987a0168fdac786f0df74f88750672

  • SHA1

    511d956842aba8bbe8f8ba29ba5c2fd55f1b0bcf

  • SHA256

    030d3edbdf2d8f3e4501d3b335e38d230bfe3f77fc084b5a04c46bd2c642db89

  • SHA512

    c64b3c41af67a4744bceaddd4162894e980c5e46236e0e5470b97c778f56163b3ecd116de2185ccd15282c3dde3d531fb8bc5d7b8fc9789c7fb4c286017128fa

  • SSDEEP

    12288:vKVGgMbKPlalt+Jn07XRSfVB6e6h5z6pEDDr3zdypAbfdXDVyHU3UeW60:vKVGg9Elto07hSdBzYCgDrDdSUftDVUp

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-02-18_f0987a0168fdac786f0df74f88750672_mafia

    • Size

      727KB

    • MD5

      f0987a0168fdac786f0df74f88750672

    • SHA1

      511d956842aba8bbe8f8ba29ba5c2fd55f1b0bcf

    • SHA256

      030d3edbdf2d8f3e4501d3b335e38d230bfe3f77fc084b5a04c46bd2c642db89

    • SHA512

      c64b3c41af67a4744bceaddd4162894e980c5e46236e0e5470b97c778f56163b3ecd116de2185ccd15282c3dde3d531fb8bc5d7b8fc9789c7fb4c286017128fa

    • SSDEEP

      12288:vKVGgMbKPlalt+Jn07XRSfVB6e6h5z6pEDDr3zdypAbfdXDVyHU3UeW60:vKVGg9Elto07hSdBzYCgDrDdSUftDVUp

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks