Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

0194672de8...05.exe

windows7-x64

8

0194672de8...05.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0194672de875d36b6d9f8bc56823a0163623f0335b94d0c4b0813f0d69fd7305

  • Size

    5.7MB

  • Sample

    240511-h5wqrsdb6v

  • MD5

    569b6ba8be8e12e4e5f76b729704fbf3

  • SHA1

    06bd76ec19c7721d815ac0e56009f67cabf0080d

  • SHA256

    0194672de875d36b6d9f8bc56823a0163623f0335b94d0c4b0813f0d69fd7305

  • SHA512

    dfa251687d19b02faadb634516927376cf17f9c79c23c6933d29085e69e6be2d3988a912d50d132d3a0449759b807de0c389a029dc26b8bfd013eda27235b174

  • SSDEEP

    49152:7KPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPn:7sKUgTH2M2m9UMpu1QfLczqssnKSk

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      0194672de875d36b6d9f8bc56823a0163623f0335b94d0c4b0813f0d69fd7305

    • Size

      5.7MB

    • MD5

      569b6ba8be8e12e4e5f76b729704fbf3

    • SHA1

      06bd76ec19c7721d815ac0e56009f67cabf0080d

    • SHA256

      0194672de875d36b6d9f8bc56823a0163623f0335b94d0c4b0813f0d69fd7305

    • SHA512

      dfa251687d19b02faadb634516927376cf17f9c79c23c6933d29085e69e6be2d3988a912d50d132d3a0449759b807de0c389a029dc26b8bfd013eda27235b174

    • SSDEEP

      49152:7KPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPn:7sKUgTH2M2m9UMpu1QfLczqssnKSk

    Score
    8/10
    spywarestealer

    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks