Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Installerx64.exe

  • Size

    38.5MB

  • Sample

    240319-3ght8aae35

  • MD5

    c5073689e54bbd226a0322644ff1ffd7

  • SHA1

    4af7bdc865d0acfe94c1ca720e9bc67ca2225c97

  • SHA256

    e7ea0da745197227e33d8741f8b903533df9f7e0950d3ed98db8ce63597c2575

  • SHA512

    bb87c3d4826620e159b8d72cceef7454eaca79e57e43aaf9ab4fe657d5c387b3e5b68e9e9dbdae4e177254ba3c876df6a9d698185e357df419725e9ad1962163

  • SSDEEP

    393216:qQgHDlanaGBXvDKtz+bhPWES4tiNQPNrIKc4gaPbUAgrO4mgy96l+ZArYsFRlh8d:q3on1HvSzxAMNyFZArYsZgCmxMdI5

Score
7/10

Malware Config

Targets

    • Target

      Installerx64.exe

    • Size

      38.5MB

    • MD5

      c5073689e54bbd226a0322644ff1ffd7

    • SHA1

      4af7bdc865d0acfe94c1ca720e9bc67ca2225c97

    • SHA256

      e7ea0da745197227e33d8741f8b903533df9f7e0950d3ed98db8ce63597c2575

    • SHA512

      bb87c3d4826620e159b8d72cceef7454eaca79e57e43aaf9ab4fe657d5c387b3e5b68e9e9dbdae4e177254ba3c876df6a9d698185e357df419725e9ad1962163

    • SSDEEP

      393216:qQgHDlanaGBXvDKtz+bhPWES4tiNQPNrIKc4gaPbUAgrO4mgy96l+ZArYsFRlh8d:q3on1HvSzxAMNyFZArYsZgCmxMdI5

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks