Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Spotify.exe

  • Size

    45.9MB

  • Sample

    240312-v57t9aeg8w

  • MD5

    44660796e71acf8fb60f2c3568dffdac

  • SHA1

    77077828dd93440c5b5b5bf2db80e1551b46a000

  • SHA256

    37f9a528303f1dc655263a5e5e134277236c38f8ad0e7144640c0b563d85c1ed

  • SHA512

    ae6aeabf3f90d0de53a39b49190656fbd1ffe43d61bab9f4b6f79797122be7b2ee8762eeb407ff1aeca4370d9d50a0b900226e7b28dc02ad02daae4a45881539

  • SSDEEP

    393216:Nh9S2nnx837XfZh2Jp5MLurEUWjljEh01tLyHWX8Wjs+da:P9Dnxq7BhpdbJ91hyHJes+da

Malware Config

Targets

    • Target

      Spotify.exe

    • Size

      45.9MB

    • MD5

      44660796e71acf8fb60f2c3568dffdac

    • SHA1

      77077828dd93440c5b5b5bf2db80e1551b46a000

    • SHA256

      37f9a528303f1dc655263a5e5e134277236c38f8ad0e7144640c0b563d85c1ed

    • SHA512

      ae6aeabf3f90d0de53a39b49190656fbd1ffe43d61bab9f4b6f79797122be7b2ee8762eeb407ff1aeca4370d9d50a0b900226e7b28dc02ad02daae4a45881539

    • SSDEEP

      393216:Nh9S2nnx837XfZh2Jp5MLurEUWjljEh01tLyHWX8Wjs+da:P9Dnxq7BhpdbJ91hyHJes+da

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks