Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
459002f85e022d94c667b7e5dfd269501e6390bdda69dd3346c5b7671e94a99b
-
Size
222KB
-
Sample
240508-xy6pqaah51
-
MD5
0d67e3da99887d051732d423b41ae56c
-
SHA1
9fe09af891a5e91664be699cb8619d691a018d57
-
SHA256
459002f85e022d94c667b7e5dfd269501e6390bdda69dd3346c5b7671e94a99b
-
SHA512
680da27f1162b6fb79964855e4c931ed3d726213b6ad9d493cd9f681c45a91d140c3d266fef6513b6a2e223d1c7758b6f95070301caf2d0762ed7d7a979effcb
-
SSDEEP
3072:xiziim/9dsPntH82W+DjpOIJuBBlw3s1ySueAaU7bBCMpigbf964MiTS1eQ:vA82WWluvlwcruXaURC0Hbf964HTf
Static task
static1
Behavioral task
behavioral1
Sample
459002f85e022d94c667b7e5dfd269501e6390bdda69dd3346c5b7671e94a99b.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
stealc
http://185.172.128.151
-
url_path
/7043a0c6a68d9c65.php
Targets
-
-
Target
459002f85e022d94c667b7e5dfd269501e6390bdda69dd3346c5b7671e94a99b
-
Size
222KB
-
MD5
0d67e3da99887d051732d423b41ae56c
-
SHA1
9fe09af891a5e91664be699cb8619d691a018d57
-
SHA256
459002f85e022d94c667b7e5dfd269501e6390bdda69dd3346c5b7671e94a99b
-
SHA512
680da27f1162b6fb79964855e4c931ed3d726213b6ad9d493cd9f681c45a91d140c3d266fef6513b6a2e223d1c7758b6f95070301caf2d0762ed7d7a979effcb
-
SSDEEP
3072:xiziim/9dsPntH82W+DjpOIJuBBlw3s1ySueAaU7bBCMpigbf964MiTS1eQ:vA82WWluvlwcruXaURC0Hbf964HTf
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-