Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ede42de45a...3f.exe

windows7-x64

7

ede42de45a...3f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f.exe

  • Size

    14.2MB

  • Sample

    240603-bmyn3sea3w

  • MD5

    1548224f8551dfc606b9df44c4925162

  • SHA1

    dd0435cf225ef9c1335bd506d3d06dddadebc0fe

  • SHA256

    ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f

  • SHA512

    33c0dcb808be041bc24466d6e117a11f3f91f7fbd3a7951230ca03b0bb2d8c7f0310c3f000f4e0efca6d18a9fd298757515cb2be63c96d1a11f826c341058061

  • SSDEEP

    393216:sEkZgf8Xq1+TtIiFGvvB5IjWqn6eclz10yuq+d:sRbXq1QtIZX3ILn6eccyr+d

Score
10/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target

      ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f.exe

    • Size

      14.2MB

    • MD5

      1548224f8551dfc606b9df44c4925162

    • SHA1

      dd0435cf225ef9c1335bd506d3d06dddadebc0fe

    • SHA256

      ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f

    • SHA512

      33c0dcb808be041bc24466d6e117a11f3f91f7fbd3a7951230ca03b0bb2d8c7f0310c3f000f4e0efca6d18a9fd298757515cb2be63c96d1a11f826c341058061

    • SSDEEP

      393216:sEkZgf8Xq1+TtIiFGvvB5IjWqn6eclz10yuq+d:sRbXq1QtIZX3ILn6eccyr+d

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks