Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

gx-browser.js

windows7-x64

1

gx-browser.js

windows10-2004-x64

8

Resubmissions

18/03/2024, 15:07

240318-shhkqscb9y 8

18/03/2024, 15:03

240318-se9j2scb51 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gx-browser

  • Size

    165KB

  • Sample

    240318-shhkqscb9y

  • MD5

    e276a501681746b6a8c8a53352ee754d

  • SHA1

    8d1821e0ec5d967e36cb4969763dd3c63e4cc220

  • SHA256

    837415683d56ba17ab5b260587855ac35076e05018a6281f4064cd1d03a46ac9

  • SHA512

    50fbbc879c24f13c85134d4713a66072eec6b8c37c60452f505fb624b85e94ef28530a2f1118be31936d503e3ab3af20398cab244ce87a056633c70d13afb393

  • SSDEEP

    1536:WasZT/zlXf87fita72252wj+YSLct/xWpmgLODCcsLUazNcpBzaMB20AWiigzzoq:oL8Ly92YwNJ0PzDreFOHDlNDuG

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      gx-browser

    • Size

      165KB

    • MD5

      e276a501681746b6a8c8a53352ee754d

    • SHA1

      8d1821e0ec5d967e36cb4969763dd3c63e4cc220

    • SHA256

      837415683d56ba17ab5b260587855ac35076e05018a6281f4064cd1d03a46ac9

    • SHA512

      50fbbc879c24f13c85134d4713a66072eec6b8c37c60452f505fb624b85e94ef28530a2f1118be31936d503e3ab3af20398cab244ce87a056633c70d13afb393

    • SSDEEP

      1536:WasZT/zlXf87fita72252wj+YSLct/xWpmgLODCcsLUazNcpBzaMB20AWiigzzoq:oL8Ly92YwNJ0PzDreFOHDlNDuG

    Score
    8/10
    spywarestealerupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks