Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2024, 02:37

General

  • Target

    .exe/BrowsingHistoryView.exe

  • Size

    558KB

  • MD5

    1642b26deb2ed4d9573712ce2974e85a

  • SHA1

    733a7d59fd23610057c9e6d6c700461bc8517b01

  • SHA256

    cdfb491344d29901d508a8f88dafbc237ffc53e6980106f325764809f58f8505

  • SHA512

    d3fc350e17368c4b73196a7d4d29b62107ba1dd8df4b453fc112921fb8211ecb894df1df44e61387c070e4dffb3a97a53663b32f084a1068bccdbf1983a22452

  • SSDEEP

    12288:bcipgIgwMlLWpBLxSF1md2VkMu7bTMxZ0m41u1zy43gfE:QvIgHSLxMQgVoXTS0x1u1zyqgfE

Score
7/10

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Suspicious behavior: EnumeratesProcesses 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\.exe\BrowsingHistoryView.exe
    "C:\Users\Admin\AppData\Local\Temp\.exe\BrowsingHistoryView.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:228

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads