Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

36e6d1ee19...60.exe

windows7-x64

7

36e6d1ee19...60.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36e6d1ee194eed14caa00e3369de3f0f0b99124acf964ad9cf865d580c1edc60

  • Size

    944KB

  • Sample

    240527-ztb1naba78

  • MD5

    f0c336b851b693265218ab7bce67572e

  • SHA1

    46e3e62128fc1de9241b8a0585f761dc0ace04bc

  • SHA256

    36e6d1ee194eed14caa00e3369de3f0f0b99124acf964ad9cf865d580c1edc60

  • SHA512

    252030c18b0e3570f3ae334220ada5cae220142e73d65e51e95ffd43afe2fd5e036e6ba774942587fc30a67cda7b0586422b4d75248de20f4162e4ac229e5bd0

  • SSDEEP

    24576:+UhiHOeo8rin3thLO3r2p2gV8ng2P2OaXbQYxj:thiHprothLO3aCg2PraXbQ

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      36e6d1ee194eed14caa00e3369de3f0f0b99124acf964ad9cf865d580c1edc60

    • Size

      944KB

    • MD5

      f0c336b851b693265218ab7bce67572e

    • SHA1

      46e3e62128fc1de9241b8a0585f761dc0ace04bc

    • SHA256

      36e6d1ee194eed14caa00e3369de3f0f0b99124acf964ad9cf865d580c1edc60

    • SHA512

      252030c18b0e3570f3ae334220ada5cae220142e73d65e51e95ffd43afe2fd5e036e6ba774942587fc30a67cda7b0586422b4d75248de20f4162e4ac229e5bd0

    • SSDEEP

      24576:+UhiHOeo8rin3thLO3r2p2gV8ng2P2OaXbQYxj:thiHprothLO3aCg2PraXbQ

    Score
    7/10
    spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks