Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
25/02/2024, 18:56
Behavioral task
behavioral1
Sample
cbb.exe
Resource
win7-20240221-en
General
-
Target
cbb.exe
-
Size
12.8MB
-
MD5
3e41b5ad8570b7906097a9e1921309dc
-
SHA1
34f706deb8b2a01081517be2cd10eb66976c1a38
-
SHA256
f48879b4ac01e464508d3dee27e0af0abc126f9613fdb6f6c94cc53391002504
-
SHA512
043b5da0897d35618f1f91d3a68c19b2fb0200ad39f51d6fb97ead7ae3a29b2627149925946f7eb882e3dc2663a7d1721be0b9e0c6ecbacdc7e23d68096d28cb
-
SSDEEP
393216:7oVRY/m3pabY9c5hlERgAdZYyW0trc7K7j3CupDb:7oHYKoYEhkgAdZWCg7K7jyupDb
Malware Config
Signatures
-
Loads dropped DLL 34 IoCs
pid Process 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe 4956 cbb.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 1612 wrote to memory of 4956 1612 cbb.exe 88 PID 1612 wrote to memory of 4956 1612 cbb.exe 88
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13KB
MD5f2ca4a6e2407bcf67377d03f98142cd6
SHA1fff1a5250dda2b049e86b01990de6b5808df0241
SHA256c97cdcf64732821d8308627f0488b7259abb6a382027bdc2edfc92a9b170826a
SHA5128859533a4004d04056abde4e471b4cf92d5d3a8f8c5722854937d2a7235500834e0081a9034e0e4840728d3e1ebd139a814cc9a0171278e98384dae1fffeb603
-
Filesize
12KB
MD5e8af5bdf9b56fc0dc73007467484aecc
SHA115a446ce13abcda72276c77a82fccc83c51e7a17
SHA256784b715e8b281e7ff4e427043828bec8765acf36d152a48e37692c8296445d46
SHA512f03406130cd6402bd04f999e5ef5429fca28f0791f2e7a38ce867631e1758ad848e06ebaa975f4731c3d4df44b500eb41479b0c4d3d28e52a5f307e0b09db833
-
Filesize
13KB
MD57d405981c46bbc578bf46ee2fdd3079c
SHA1e93869e798812ab850c4fde58d152f989f5ecd38
SHA256d90115ed4dac2871c94ad732d312d767df0d0c2d63aaeed880fc85db7d53d963
SHA512e3c7375ea8294ae7abe3cbf82c1cdd86ae89591046e36e23448628c1c6ed84c952837b1cde650e482fb68850ec93d15d6818ce629c8797820d1f9840a395057a
-
Filesize
14KB
MD5335f119a67efd51c2d6fd959915ffbb3
SHA1b7d69a873ce9747528c977c87a1f1cec870fc094
SHA2569c149aade4e4a724c3945fed423300c41bb77ceebf61c9acf29d1b97d98260a2
SHA512285494499a16267abc0be756cb6ef9012ec8b26960f1d4c72ef950f6fee783144dfb4a6ea5b5788a444dbd7c93e084369fdf1012a2140fb90d17f8f46a3b92e1
-
Filesize
10KB
MD57435accde789b701a1df37462cc4e1ed
SHA17b3c8207f8a699cd2cd9428cd9740490555f7eed
SHA25637a05109296a76194baa7bb7473cdb032a83b73b4c5b2d5f67d93a35ab97b9b6
SHA512f9c5ca857be746ddc0587fe28d05840e9d72255f1ed001a74a0f8d25f97e5516d9e6ae3f58c8022832d663810969202efbe5d9dbdc40a1d4ab82f8fcd0bba67b
-
Filesize
12KB
MD549d3bc1462b7ee111103a0d15b90ff96
SHA1231f9e03eabe4169f66c6da0a71ac39d67e62b2e
SHA256d2634c15a52b56868f9231a5aaf22f17367746a9991a0eb22fff0f6af0b9caa0
SHA512cb85a2b0e89999ad55fcb2bba17d077cf5bf521b36ddd1c6fc46b01abdee00d686fa7a8874fce4c71d6bce9e62192b6c555b6977dad5f3621877e2fe60b68875
-
Filesize
14KB
MD5f299e2c1a3358bf676b7be3a81faf605
SHA18629e0e64d171613209b6bf351fa5d9281289e7b
SHA2566d03317222918284cd35d6851a073396a48dc4eb7981e801be2eb34de7cf9a02
SHA512bfa6cb0bc1b6c739943c6a0c5451f7dc67893439f2230bab7222acf6de9f2f40d9ce75fbef45d0d06a1de1041fa1760695b4e5c9c76907a2ec0131efc5e4af4a
-
Filesize
15KB
MD546014049d0c4b36e88138a858081207e
SHA12134cca129c14c439a2daa848e26eb9896d13ef0
SHA25660f717768ca9114fcc389baa37e33274e7c029e36bb1c3a32877df34205cd508
SHA512ebc15dff1ea02ba0b26619860cd6a33ec07b52fd8edcf877a266cc22e1c3b379c39a6cdd646cfb1a963ddeedf53a4cdbe36dc2828daf0009363a73a3c6051dcb
-
Filesize
17KB
MD5aeaa5ba622eb338b56061c6e01995b92
SHA13804ab47e89a73913070959019be94028b19e960
SHA256d5f9dfcb8bbae31f12960d1ab4fe54786d42529990cdb8c18446c9ae370ca038
SHA512e10a6ed626b5fe2888e82514d694804d9990526b64a6244c3ba426b84c527ddcde5ec5ec802431910d655875dfa532f10d89fd319451ea0d9a98e40ddeda9527
-
Filesize
21KB
MD51b646b2cb599f2b873737ab041fe7681
SHA1bbef9015f6beac1409cd4560b304f927eaca0ba0
SHA25610a511b1077952c40be8af99db5a2bba5589f99e1fe727623bd0be1bba24bce7
SHA5126bfc596f7a916d28058d6db8c66a6d12700a4a36a276e7a707c3a448de0e46f8120bb1f62adbdc5572b4b53e7d779f9532237a6ed0f7d6c4ad2ba85bb64a511f
-
Filesize
12KB
MD5f5735d559f34a1a247bfe335f3a65f67
SHA1c1fb50c084c136f6ed93b210ec540d2bd34e5b91
SHA25668888bff8e766bd17b02bf4b75b8071865c1b21362c00c44fad60a88ffad6f48
SHA512a9dc71b4c450832e62f5530033b0812959f3cbb582bcc5fb0eecba4b117c878a5e7281a0e46e11f3d405205a5f4bf130e88d71aa7e9c72fe928175168c4f664c
-
Filesize
10KB
MD5b2c388ce98d5b5e7b276c2ddd5e6f825
SHA1ef4e8a5537e583679359acb167354c8bb137ab29
SHA256741025596ebf9b2dbaa0b769aaf9cfe160d146507fee01456ef11b7a6d4cd417
SHA5125d3850b10ef7726f94642dc7747ae1632ba1319ff82174a39b65148b51f2f8934691986e88b943dfd5929c432eee7b6a020df20f42137c02bd68940144c62f2d
-
Filesize
99KB
MD58697c106593e93c11adc34faa483c4a0
SHA1cd080c51a97aa288ce6394d6c029c06ccb783790
SHA256ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833
SHA512724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987
-
Filesize
83KB
MD56c7565c1efffe44cb0616f5b34faa628
SHA188dd24807da6b6918945201c74467ca75e155b99
SHA256fe63361f6c439c6aa26fd795af3fd805ff5b60b3b14f9b8c60c50a8f3449060a
SHA512822445c52bb71c884461230bb163ec5dee0ad2c46d42d01cf012447f2c158865653f86a933b52afdf583043b3bf8ba7011cc782f14197220d0325e409aa16e22
-
Filesize
177KB
MD5f3f610b10a640a09b423e1c7e327cad1
SHA1007bf7000df98e4591bdbfc75e7a363457c692fd
SHA256d112ae33247d896008d79a1a5f96b98d0eaee80d13372e64c2d88ffbd94fadf8
SHA51228726490d1026ad6f2bbad949b247f904e4ceceef7011e7408c11e4fab886e77e84317e7a14e3e86c1b7178666b06e0a774734a497f91afff76882756e03b6b0
-
Filesize
122KB
MD529da9b022c16da461392795951ce32d9
SHA10e514a8f88395b50e797d481cbbed2b4ae490c19
SHA2563b4012343ef7a266db0b077bbb239833779192840d1e2c43dfcbc48ffd4c5372
SHA5125c7d83823f1922734625cf69a481928a5c47b6a3bceb7f24c9197175665b2e06bd1cfd745c55d1c5fe1572f2d8da2a1dcc1c1f5de0903477bb927aca22ecb26a
-
Filesize
264KB
MD5ce4df4dfe65ab8dc7ae6fcdebae46112
SHA1cdbbfda68030394ac90f6d6249d6dd57c81bc747
SHA256ffbe84f0a1eab363ca9cf73efb7518f2abd52c0893c7cc63266613c930855e96
SHA512fc8e39942e46e4494356d4a45257b657495cbfa20e9d67850627e188f70b149e22603ae4801b4ba7b9a04d201b3787899d2aee21565237d18e0afce9bae33ee9
-
Filesize
63KB
MD5f377a418addeeb02f223f45f6f168fe6
SHA15d8d42dec5d08111e020614600bbf45091c06c0b
SHA2569551431425e9680660c6baf7b67a262040fd2efceb241e4c9430560c3c1fafac
SHA5126f60bfac34ed55ff5d6ae10c6ec5511906c983e0650e5d47dac7b8a97a2e0739266cae009449cced8dff59037e2dbfc92065fbbdfde2636d13679e1629650280
-
Filesize
157KB
MD5b5355dd319fb3c122bb7bf4598ad7570
SHA1d7688576eceadc584388a179eed3155716c26ef5
SHA256b9bc7f1d8aa8498cb8b5dc75bb0dbb6e721b48953a3f295870938b27267fb5f5
SHA5120e228aa84b37b4ba587f6d498cef85aa1ffec470a5c683101a23d13955a8110e1c0c614d3e74fb0aa2a181b852bceeec0461546d0de8bcbd3c58cf9dc0fb26f5
-
Filesize
28KB
MD5e06c0c8ec05eadbeecb3083f8ec26be6
SHA10c7df3e3c82f44f4b0347be2d218fbe879770053
SHA25691adac3af53eedb4508f554e48dfee6e17252c28b017534124b43df856ea84ef
SHA512839625da6e80aaf47d664adeec9805a3af5b08ffeee270d17353e6dcaaff89518960d4fb8a7d35ad8b77be94380c4266b6efcca2535ea0362962abc518533228
-
Filesize
27KB
MD54ab2ceb88276eba7e41628387eacb41e
SHA158f7963ba11e1d3942414ef6dab3300a33c8a2bd
SHA256d82ab111224c54bab3eefdcfeb3ba406d74d2884518c5a2e9174e5c6101bd839
SHA512b0d131e356ce35e603acf0168e540c89f600ba2ab2099ccf212e0b295c609702ac4a7b0a7dbc79f46eda50e7ea2cf09917832345dd8562d916d118aba2fa3888
-
Filesize
77KB
MD5f5dd9c5922a362321978c197d3713046
SHA14fbc2d3e15f8bb21ecc1bf492f451475204426cd
SHA2564494992665305fc9401ed327398ee40064fe26342fe44df11d89d2ac1cc6f626
SHA512ce818113bb87c6e38fa85156548c6f207aaab01db311a6d8c63c6d900d607d7beff73e64d717f08388ece4b88bf8b95b71911109082cf4b0c0a9b0663b9a8e99
-
Filesize
86KB
MD511897592cf9c078a0a1633c57a7694e2
SHA19a6da7aaec8e808e2faee476d59bc685b2da7fbc
SHA256f8d0afd1fe15f19d3a3ade2a673eb2b9ecdc7952e67c6e50d228fe9666af2f79
SHA51272b9a264a2d6ea5e1a3fed8bd44501fbd035708b28e40b6993cb41ed041a439edc63cd4c23a9833cf08cf89c82b86fa9f3f5484262d6131d3e2142222eb4e88d
-
Filesize
149KB
MD5ef4755195cc9b2ff134ea61acde20637
SHA1d5ba42c97488da1910cf3f83a52f7971385642c2
SHA2568a86957b3496c8b679fcf22c287006108bfe0bb0aaffea17121c761a0744b470
SHA51263ad2601fb629e74cf60d980cec292b6e8349615996651b7c7f68991cdae5f89b28c11adb77720d7dbbd7700e55fdd5330a84b4a146386cf0c0418a8d61a8a71
-
Filesize
21KB
MD5c9d5a1a4b6186b5ad1242e6c5cca31e5
SHA140c29c4b192ab421038d7ba2f407ad52bd0e1dc5
SHA256eec57d615873e2065ed83da6164774b9396b4984ad39e1c2166f2c9b45626272
SHA512a2a3afd56350c7de3ca55b105928eceb8952e9bac08aaf171ef6644d50385afb836fc39abd1d9b372e65edfff4c6e686a084dcd03231487b96f1674401cca290
-
Filesize
822KB
MD55abe291cf75685735148b91d73e66b40
SHA1b600d6cc98ee45924594adfe706609eb747cb2f3
SHA2568573edbc6368993205c8da8962eafeb4ac1f5e096309c429855934190591bf53
SHA51292aa388c82d072c740da1eddcfe17dc230cd101b6ae7ca67a9e1b744c3988a175ca55b3edfc87232e65e8e2258c2523f6bcc25036ff1babe99c02f3fd71a3dd7
-
Filesize
3.2MB
MD5cc4cbf715966cdcad95a1e6c95592b3d
SHA1d5873fea9c084bcc753d1c93b2d0716257bea7c3
SHA256594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1
SHA5123b5af9fbbc915d172648c2b0b513b5d2151f940ccf54c23148cd303e6660395f180981b148202bef76f5209acc53b8953b1cb067546f90389a6aa300c1fbe477
-
Filesize
32KB
MD5eef7981412be8ea459064d3090f4b3aa
SHA1c60da4830ce27afc234b3c3014c583f7f0a5a925
SHA256f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
SHA512dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016
-
Filesize
673KB
MD5bc778f33480148efa5d62b2ec85aaa7d
SHA1b1ec87cbd8bc4398c6ebb26549961c8aab53d855
SHA2569d4cf1c03629f92662fc8d7e3f1094a7fc93cb41634994464b853df8036af843
SHA51280c1dd9d0179e6cc5f33eb62d05576a350af78b5170bfdf2ecda16f1d8c3c2d0e991a5534a113361ae62079fb165fff2344efd1b43031f1a7bfda696552ee173
-
Filesize
184KB
MD50dc9848a5fce6ec03799ac65602dc053
SHA1ddfd97a45c0db5117e047bf45d66873b53160978
SHA256adc9c63f92629ed4b860fc1855400b59a1ae73dd489fd49db326dcfcad48550e
SHA512d1b2f71000cab1115971d44c690fdb8966b9b402216b87ec1f1e8e8a1cca3ce1e1145b8d650c8ad737e6e24c59503aaf9310de3e96a0ac6596187c800013ac71
-
Filesize
4.3MB
MD511c051f93c922d6b6b4829772f27a5be
SHA142fbdf3403a4bc3d46d348ca37a9f835e073d440
SHA2560eabf135bb9492e561bbbc5602a933623c9e461aceaf6eb1ceced635e363cd5c
SHA5121cdec23486cffcb91098a8b2c3f1262d6703946acf52aa2fe701964fb228d1411d9b6683bd54527860e10affc0e3d3de92a6ecf2c6c8465e9c8b9a7304e2a4a6
-
Filesize
156KB
MD506e6cd5b1a97c1c2a6f7c97649109425
SHA1f5831ccec0dc1f7d8602abb7ef90eb4fb6e21bde
SHA2560c5d9a8e7b593d007d64ab2c8b0f9bf44fdd15c9307d8403d39f20dfb1627b09
SHA512ac04e63e8ed0a252f2f08cf0129759205f2aa8f29de341e1ed0b73285274626aac901b47eea5fe16f8f27a32797ebe14bab9cd90e3484c4d01ce708160b968ca
-
Filesize
654KB
MD5f81a9fecc26f080a8c78edaf2a46f1e4
SHA1d0f99829774bce3db8ce03470b20ed4fbc75a055
SHA256a9cc9c111293f8edf91c439858ff8b97b2197574cd37d9d07bbbd455e09421e6
SHA512c6ec31dee7c4bf36bb05688955ddeeb239adfefc9140c4f0067f718aa841bf83bc4a19523b609393674358842628f58adbfbc6fe3edef055d20aad9222657a29
-
Filesize
129KB
MD574f0a90fbdd64f0c431cbf55a47eab35
SHA1ef8711c4d6539ef0fde786976f665cd3bacff901
SHA256684267ae1acf4a7cc069e511ffd72bbc8d9d071ee23c4a7d98156374dbf87958
SHA51269cfa5766d376fb4caf23e2adb4fa374eb01ec645e1d1b71f44e264c130eee888e75bc46b99465def162601f487b41917bc245aa2d1f9bd194aa7dff31ebb6c8
-
Filesize
26KB
MD57a442bbcc4b7aa02c762321f39487ba9
SHA10fcb5bbdd0c3d3c5943e557cc2a5b43e20655b83
SHA2561dd7bba480e65802657c31e6d20b1346d11bca2192575b45eb9760a4feb468ad
SHA5123433c46c7603ae0a73aa9a863b2aecd810f8c0cc6c2cd96c71ef6bde64c275e0fceb4ea138e46a5c9bf72f66dcdea3e9551cf2103188a1e98a92d8140879b34c
-
Filesize
1.4MB
MD5ae6c9d9f085262b4623791babb088e3f
SHA1d908cbfd291a72f355a2080f6670eb7c661fde08
SHA2562934dba913caf3cea148207d8c4506350a02f0d4e150bba229113ebe8fe3bc6b
SHA5121438adbb5925f5da07eef6e50f40ac8c56e46b8c69e926c3cba183fc2316344ae6afa0897d1000492804b5809808eb17a74ccb0bf5acef0fe0575f861a594b89
-
Filesize
1.1MB
MD58320c54418d77eba5d4553a5d6ec27f9
SHA1e5123cf166229aebb076b469459856a56fb16d7f
SHA2567e719ba47919b668acc62008079c586133966ed8b39fec18e312a773cb89edae
SHA512b9e6cdcb37d26ff9c573381bda30fa4cf1730361025cd502b67288c55744962bdd0a99790cedd4a48feef3139e3903265ab112ec545cb1154eaa2a91201f6b34
-
Filesize
129KB
MD52c792ab3c75a897aaf4355532872e48e
SHA1eb7742196a17fd7e4badaab82bb32d06f9948082
SHA256e68bf1a0e2f1aafff0558dcb40b8916f971860eeeaf6ccdf726d4bffbadd7d1e
SHA51231464abd6e64045308727e71e81969175a521c762e2344112403ff5f998ab6e3249d33e9c8e8e46fd1521c9dd700f535e47435b5ba179e98421dc6f35162eda3
-
Filesize
148KB
MD590a1d4b55edf36fa8b4cc6974ed7d4c4
SHA1aba1b8d0e05421e7df5982899f626211c3c4b5c1
SHA2567cf3e9e8619904e72ea6608cc43e9b6c9f8aa2af02476f60c2b3daf33075981c
SHA512ea0838be754e1258c230111900c5937d2b0788f90bbf7c5f82b2ceda7868e50afb86c301f313267eaa912778da45755560b5434885521bf915967a7863922ae2
-
Filesize
124KB
MD59618e15b04a4ddb39ed6c496575f6f95
SHA11c28f8750e5555776b3c80b187c5d15a443a7412
SHA256a4cd72e529e60b5f74c50e4e5b159efaf80625f23534dd15a28203760b8b28ab
SHA512f802582aa7510f6b950e3343b0560ffa9037c6d22373a6a33513637ab0f8e60ed23294a13ad8890935b02c64830b5232ba9f60d0c0fe90df02b5da30ecd7fa26