Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
de04bfb0017396977c37fedb18d30e174080c71d1e9e7e0054577ca0d8b1e5ce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de04bfb0017396977c37fedb18d30e174080c71d1e9e7e0054577ca0d8b1e5ce.exe
Resource
win10v2004-20240426-en
General
-
Target
de04bfb0017396977c37fedb18d30e174080c71d1e9e7e0054577ca0d8b1e5ce.exe
-
Size
120KB
-
MD5
979bfece223c27b05fcd7e99117e6d19
-
SHA1
67962481e46a3ae4419a7d7f725d9bce35d1d37f
-
SHA256
de04bfb0017396977c37fedb18d30e174080c71d1e9e7e0054577ca0d8b1e5ce
-
SHA512
818f0f83bf679d3b5ea785db992b6feecf1b429143e244f03fc9c0bb145e085b9872e371306d1d378c97bbbe17cff1b15b1eb5cdf720e583e8f7689095ba309e
-
SSDEEP
3072:Gr/zIEyQIrPP+V4MrdN/086ibgqGWkca/:GrsEyQUPP0xFsYW/
Malware Config
Signatures
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_Binary_References_Browsers -
NetWire RAT payload 1 IoCs
resource yara_rule sample netwire -
Netwire family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de04bfb0017396977c37fedb18d30e174080c71d1e9e7e0054577ca0d8b1e5ce.exe
Files
-
de04bfb0017396977c37fedb18d30e174080c71d1e9e7e0054577ca0d8b1e5ce.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
8 Size: 8KB - Virtual size: 11KB
Size: 120KB - Virtual size: 4B
���� Size: - Virtual size:
Size: - Virtual size: