Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6e3e41ca7b092d13e07c8a555245d5c2755510e2d782c65e265ccaaa0edae408
-
Size
1.3MB
-
Sample
240311-2lv5nsge4t
-
MD5
9293c9f4a44b1f66fb4a2db53d1a492f
-
SHA1
69ed2ef52fed79e4c146e902f7b1b7a0d7035ef0
-
SHA256
6e3e41ca7b092d13e07c8a555245d5c2755510e2d782c65e265ccaaa0edae408
-
SHA512
fc19f7f89f4281f07f5f0fea4ee4d992657d73fa5f2fc8a43bbe7458aeabf062bc421943068172505459218f7be54ec3993e4d55a0c809d957acfa6fa35d2dc8
-
SSDEEP
24576:xnxD0jNNZJR+VzYv8aqNCjKLvfpfZkyOf2yAy6+ohyFq1H/J+OszbQRsB:FZ6Nl+VUvdeAyIRwWq1H/J+jbQR6
Malware Config
Targets
-
-
Target
6e3e41ca7b092d13e07c8a555245d5c2755510e2d782c65e265ccaaa0edae408
-
Size
1.3MB
-
MD5
9293c9f4a44b1f66fb4a2db53d1a492f
-
SHA1
69ed2ef52fed79e4c146e902f7b1b7a0d7035ef0
-
SHA256
6e3e41ca7b092d13e07c8a555245d5c2755510e2d782c65e265ccaaa0edae408
-
SHA512
fc19f7f89f4281f07f5f0fea4ee4d992657d73fa5f2fc8a43bbe7458aeabf062bc421943068172505459218f7be54ec3993e4d55a0c809d957acfa6fa35d2dc8
-
SSDEEP
24576:xnxD0jNNZJR+VzYv8aqNCjKLvfpfZkyOf2yAy6+ohyFq1H/J+OszbQRsB:FZ6Nl+VUvdeAyIRwWq1H/J+jbQR6
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-