Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

settings.json

windows11-21h2-x64

8

Resubmissions

17/04/2024, 16:38

240417-t5dqqsha6t 8

17/04/2024, 16:29

240417-tzjd2afd56 7

17/04/2024, 16:16

240417-tqy35afb29 8

17/04/2024, 16:13

240417-tn61ysge3w 8

17/04/2024, 16:11

240417-tndpeagd9v 3

17/04/2024, 16:01

240417-tge9nagc4x 8

17/04/2024, 15:53

240417-tbt6maga9s 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    settings.json

  • Size

    717B

  • Sample

    240417-tge9nagc4x

  • MD5

    9524b55958a0e976a0b97cda97c12516

  • SHA1

    c27592c0c683be473ccc0f1299a1a464f9f4792b

  • SHA256

    092129f26834f0f3453c3c0cf6fc450c8d9c00e8521a464affb3b5696ae7263c

  • SHA512

    cf122e2a291baa58a753bccc0f7cc0d93ab35f62bd39ffce5cba29e9455f904727d7496f70154254c154481adcd25f59137d993b81c0f8d7c2642a6624ec5407

Score
8/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      settings.json

    • Size

      717B

    • MD5

      9524b55958a0e976a0b97cda97c12516

    • SHA1

      c27592c0c683be473ccc0f1299a1a464f9f4792b

    • SHA256

      092129f26834f0f3453c3c0cf6fc450c8d9c00e8521a464affb3b5696ae7263c

    • SHA512

      cf122e2a291baa58a753bccc0f7cc0d93ab35f62bd39ffce5cba29e9455f904727d7496f70154254c154481adcd25f59137d993b81c0f8d7c2642a6624ec5407

    Score
    8/10
    discoveryevasionpersistencespywarestealertrojan

    • Downloads MZ/PE file

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks