Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
14/03/2024, 05:19
Behavioral task
behavioral1
Sample
c7c9fa3ae0fc964b18e043c1f4e6c642.exe
Resource
win7-20240221-en
3 signatures
150 seconds
General
-
Target
c7c9fa3ae0fc964b18e043c1f4e6c642.exe
-
Size
235KB
-
MD5
c7c9fa3ae0fc964b18e043c1f4e6c642
-
SHA1
fd364240121c1943d0ae8ac2b74a494cc88c7229
-
SHA256
8bc6e488d1675a71bf9aa9fcaac6f122ab67fa5fb2ef26b23770f188fa656555
-
SHA512
5f69534a63eda766b5cd9ed24d9212e570c55d0affa040d3a7be83c83dd5af9518f0ea5732d1ce77ccbf88c0d3ccb884a58265f24e85c03532f2557d958742d3
-
SSDEEP
6144:/CBhXHwtX9LgNcmOaaOLMlIdgoKTLHYSUV:/CsNOLMRTDMV
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/3972-0-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-1-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-2-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-3-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-4-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-5-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-6-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-7-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-8-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-9-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-10-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-11-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-12-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-13-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/3972-14-0x0000000000400000-0x0000000000487000-memory.dmp upx