Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7d417991d6a5a0d30421d721168db76c170c4a022c53a5deece2fd9d072e4246
-
Size
289KB
-
Sample
240501-za9gtafh81
-
MD5
652681cfc42cc05b4812c914e4f02ba9
-
SHA1
39118acf00963bb2b9bafc13072cc4a3f6ce9c48
-
SHA256
7d417991d6a5a0d30421d721168db76c170c4a022c53a5deece2fd9d072e4246
-
SHA512
10dc092ec21e06efbbfa6e0fc5d286c272160d71430f3facf2c5c15f264965c052a5dac3bc516c3d514c372ca77e8f9bac9a86ffa28b8f59c4c60510ff9af0b6
-
SSDEEP
3072:To8T2gJRvh7+/xXoN/E6ILjZeA0SDYQSbdA5BTuEqpiVg1fd:VHhhy/OWfoA0SDYQAmaxpbR
Static task
static1
Behavioral task
behavioral1
Sample
7d417991d6a5a0d30421d721168db76c170c4a022c53a5deece2fd9d072e4246.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
stealc
http://185.172.128.150
-
url_path
/c698e1bc8a2f5e6d.php
Targets
-
-
Target
7d417991d6a5a0d30421d721168db76c170c4a022c53a5deece2fd9d072e4246
-
Size
289KB
-
MD5
652681cfc42cc05b4812c914e4f02ba9
-
SHA1
39118acf00963bb2b9bafc13072cc4a3f6ce9c48
-
SHA256
7d417991d6a5a0d30421d721168db76c170c4a022c53a5deece2fd9d072e4246
-
SHA512
10dc092ec21e06efbbfa6e0fc5d286c272160d71430f3facf2c5c15f264965c052a5dac3bc516c3d514c372ca77e8f9bac9a86ffa28b8f59c4c60510ff9af0b6
-
SSDEEP
3072:To8T2gJRvh7+/xXoN/E6ILjZeA0SDYQSbdA5BTuEqpiVg1fd:VHhhy/OWfoA0SDYQAmaxpbR
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-