Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

cd6667179b...ec.exe

windows7-x64

7

cd6667179b...ec.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd6667179b2ab587b458af97bae8027788a8fe179686d1c08aa924d7b5634eec

  • Size

    3.6MB

  • Sample

    240517-etxxxagh4y

  • MD5

    40dc544ba99243539f6d6be8a4bbd796

  • SHA1

    c9fceb70dfdb1fb185c6d663e1d54d4a03979450

  • SHA256

    cd6667179b2ab587b458af97bae8027788a8fe179686d1c08aa924d7b5634eec

  • SHA512

    f6bd2492af9a6ef73998ed070a95c8d2f4476dc238f8d0c9ee690c95f3f957174b0635205dca45f43299cc01a8c07b2161b39bafd86d91a8f1928055d1658167

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBuB/bSqz8:sxX7QnxrloE5dpUpJbVz8

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      cd6667179b2ab587b458af97bae8027788a8fe179686d1c08aa924d7b5634eec

    • Size

      3.6MB

    • MD5

      40dc544ba99243539f6d6be8a4bbd796

    • SHA1

      c9fceb70dfdb1fb185c6d663e1d54d4a03979450

    • SHA256

      cd6667179b2ab587b458af97bae8027788a8fe179686d1c08aa924d7b5634eec

    • SHA512

      f6bd2492af9a6ef73998ed070a95c8d2f4476dc238f8d0c9ee690c95f3f957174b0635205dca45f43299cc01a8c07b2161b39bafd86d91a8f1928055d1658167

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBuB/bSqz8:sxX7QnxrloE5dpUpJbVz8

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks