Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    CrackItNow - Internet Download Manager 6.40 Build 11.zip

  • Size

    10.7MB

  • Sample

    240219-3mxwbsfe5t

  • MD5

    e13e83ecf6e40ac2db1b1f606d31e0e5

  • SHA1

    59772300443659480d4a73095e0d9d966dfa4789

  • SHA256

    2e0b5523a135c76d6c8dee7376c678a9eac399bcfba9e3d36e3059e41d524783

  • SHA512

    746c9b5293353d55214bfad575fc1eafbf7ae906d6651c2ebf3c5051c0b4fb57bdda502246dd3370760dbe0b576b062fb0478d02397af238a4820879a6e66b9f

  • SSDEEP

    196608:9Ix48MJVRWwldb7rTXXRoJnS1rHfVt8P+OKMTjG7fz7BGOtYWq0J1m7v+gm+:N8MJVkwjTnRow1rNi6MTw2qPGvt

Malware Config

Targets

    • Target

      CrackItNow - Internet Download Manager 6.40 Build 11/Patch/IDM_6.3x_Crack_v17.8.exe

    • Size

      65KB

    • MD5

      d0fc4b35b2564014ed69f53c21006b15

    • SHA1

      335a2c2f30cdefd32f215a82586385cb0958fea5

    • SHA256

      7d431bb9f7d4a76d037344d01e47fdf7ba92d9a06941d292a6eafdd716e89ff3

    • SHA512

      1e75a58fa0d80dfdd6b072da1a2daac0a4b45d35e57947929ca491754e18c97b078621848207d552600e2b154ea0c42e34caceeb86ac3f39ab9184917d3a8c03

    • SSDEEP

      1536:PXD7myUFMDRmAbPVhn+klkHf4sMM0Cpcy:LChF+m+zn+DfhrlWy

    Score
    1/10
    • Target

      CrackItNow - Internet Download Manager 6.40 Build 11/idman640build11.exe

    • Size

      10.7MB

    • MD5

      f783042cdf96b3c96016ea569c2f2aed

    • SHA1

      aa74942339b7eeae75df8feed487a6a679faa966

    • SHA256

      4b716be29195552715a3efe3d778c435a7988f593f185deeccf158b657af207e

    • SHA512

      94a4da4e903713d9900e0ee305cc68a7b309090fc352f6722e083ec7a4851f173322d68dea6e447216eb26d35514cf67f92aac02beb4ea5d482cd34b0fd3158e

    • SSDEEP

      196608:Zq5pEKTIxtSAWktw8GEWnNFxp6mUYBV7u/rbUfInm0/mlZS0H5EYyQXD2petdh:eOlftwMUFHr8bvvgZTHXKpEj

    • Drops file in Drivers directory

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks