Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

8d0220bf22...75.exe

windows7-x64

7

8d0220bf22...75.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d0220bf22f31ad2c1580688108351da8b60e6006548d5f0efd3792144228175

  • Size

    3.9MB

  • Sample

    240504-amm2xagh71

  • MD5

    0eae1360ffb680bd777bf150669f04c6

  • SHA1

    eb972b730bbf4a8f21f5e3fc0775d1c57a1f5e4c

  • SHA256

    8d0220bf22f31ad2c1580688108351da8b60e6006548d5f0efd3792144228175

  • SHA512

    a2987f69ab528a230aeb53d807dcc352d8574abf9c478ba859de1a67333d3e4dbc18cc7b75c2889a82357990e7fcf413c688c1767f2997d8f87dd83f978f246f

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBtB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpybVz8eLFcz

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      8d0220bf22f31ad2c1580688108351da8b60e6006548d5f0efd3792144228175

    • Size

      3.9MB

    • MD5

      0eae1360ffb680bd777bf150669f04c6

    • SHA1

      eb972b730bbf4a8f21f5e3fc0775d1c57a1f5e4c

    • SHA256

      8d0220bf22f31ad2c1580688108351da8b60e6006548d5f0efd3792144228175

    • SHA512

      a2987f69ab528a230aeb53d807dcc352d8574abf9c478ba859de1a67333d3e4dbc18cc7b75c2889a82357990e7fcf413c688c1767f2997d8f87dd83f978f246f

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBtB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpybVz8eLFcz

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks