Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

10/04/2024, 18:44 UTC

240410-xdlh2sgc92 8

10/04/2024, 18:41 UTC

240410-xbyetsbd3v 1

10/04/2024, 18:38 UTC

240410-w93xjabc5y 1

General

  • Target

    sample

  • Size

    18KB

  • Sample

    240410-xdlh2sgc92

  • MD5

    98f2f00a13a961ecbac89496e55848a0

  • SHA1

    b571d90566409ad7b37ec30fa8d7d930e0ceb430

  • SHA256

    fe27903bf96a553d62ef5b11e29d37d1def703d6bd197d4bc3400881e7dc0721

  • SHA512

    03baeb7110c6f4f348ce436f595659f18318db741cb1d4b6966e4aff3d06ad5ab2ca32dbb576b57620f40036f758a4ec9992886df5e58a13942093d970a0d659

  • SSDEEP

    384:rI+CtgDpmReVoOs4dN9ylKeGM2U8Hhhbm1C7eS2LjFrSE3+dxVJCBXQL:rIPgBVoOs4dryI1McBhbKESFrSEuJQQL

Malware Config

Targets

    • Target

      sample

    • Size

      18KB

    • MD5

      98f2f00a13a961ecbac89496e55848a0

    • SHA1

      b571d90566409ad7b37ec30fa8d7d930e0ceb430

    • SHA256

      fe27903bf96a553d62ef5b11e29d37d1def703d6bd197d4bc3400881e7dc0721

    • SHA512

      03baeb7110c6f4f348ce436f595659f18318db741cb1d4b6966e4aff3d06ad5ab2ca32dbb576b57620f40036f758a4ec9992886df5e58a13942093d970a0d659

    • SSDEEP

      384:rI+CtgDpmReVoOs4dN9ylKeGM2U8Hhhbm1C7eS2LjFrSE3+dxVJCBXQL:rIPgBVoOs4dryI1McBhbKESFrSEuJQQL

    • Downloads MZ/PE file

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Registers COM server for autorun

    • Adds Run key to start application

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.