Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

2024-06-16...er.exe

windows7-x64

7

2024-06-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-16_e0189340b7cf6fceb691e3143a775fcc_avoslocker

  • Size

    1.3MB

  • Sample

    240616-sh8rxssbpj

  • MD5

    e0189340b7cf6fceb691e3143a775fcc

  • SHA1

    318c3668d17b68ed747abb2480fed6c1c28892df

  • SHA256

    5809bed5ff1b488415a64a2933c918f6008aa944925dccfd10ccd35d4d7e97fe

  • SHA512

    9b25a0edde92336ad5da75372f35b3dc5368d435092da7fe5ae683932acd941803c485e8f291eb5d807a0c1ab4497b86392ecaed5e8ff93be000a84d982b1094

  • SSDEEP

    24576:d2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedTEpwsQNgcdAFeK+yI47Ga:dPtjtQiIhUyQd1SkFdTEysEVAFeVyd

Score
9/10
spywarestealer

Malware Config

Targets

    • Target

      2024-06-16_e0189340b7cf6fceb691e3143a775fcc_avoslocker

    • Size

      1.3MB

    • MD5

      e0189340b7cf6fceb691e3143a775fcc

    • SHA1

      318c3668d17b68ed747abb2480fed6c1c28892df

    • SHA256

      5809bed5ff1b488415a64a2933c918f6008aa944925dccfd10ccd35d4d7e97fe

    • SHA512

      9b25a0edde92336ad5da75372f35b3dc5368d435092da7fe5ae683932acd941803c485e8f291eb5d807a0c1ab4497b86392ecaed5e8ff93be000a84d982b1094

    • SSDEEP

      24576:d2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedTEpwsQNgcdAFeK+yI47Ga:dPtjtQiIhUyQd1SkFdTEysEVAFeVyd

    Score
    9/10
    spywarestealer

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks