Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

15b97ff1e3...23.exe

windows7-x64

9

15b97ff1e3...23.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15b97ff1e3988e692a262de3a1bc35116aece92e0692ffe600a50a28aa630623

  • Size

    1.6MB

  • Sample

    240625-xlrd9szanl

  • MD5

    27e91c1da2c0bf01709f06de9609a0f2

  • SHA1

    b20d34a6b43395dfdaf709b331098604aadf4e23

  • SHA256

    15b97ff1e3988e692a262de3a1bc35116aece92e0692ffe600a50a28aa630623

  • SHA512

    43038607fd3cc5425cd5a5f3af42a6d4e6849f4aa57877cd20bd05065d3fcb980bd0c541580b99b89f3112bae7a52bcaa12a5776fa5ef70376fa80a9c96c1009

  • SSDEEP

    24576:Q4ww2HobIdkuyXrL4UeqTg6n/KZYcH5vEpmawEbmFu7+UE22XPMxorVqFB//mRe:QVwMocmuyv4CkwcH5v9aIF40JUCMFx5

Score
10/10
persistencespywarestealer

Malware Config

Targets

    • Target

      15b97ff1e3988e692a262de3a1bc35116aece92e0692ffe600a50a28aa630623

    • Size

      1.6MB

    • MD5

      27e91c1da2c0bf01709f06de9609a0f2

    • SHA1

      b20d34a6b43395dfdaf709b331098604aadf4e23

    • SHA256

      15b97ff1e3988e692a262de3a1bc35116aece92e0692ffe600a50a28aa630623

    • SHA512

      43038607fd3cc5425cd5a5f3af42a6d4e6849f4aa57877cd20bd05065d3fcb980bd0c541580b99b89f3112bae7a52bcaa12a5776fa5ef70376fa80a9c96c1009

    • SSDEEP

      24576:Q4ww2HobIdkuyXrL4UeqTg6n/KZYcH5vEpmawEbmFu7+UE22XPMxorVqFB//mRe:QVwMocmuyv4CkwcH5v9aIF40JUCMFx5

    Score
    9/10
    persistencespywarestealer

    • Detects executables containing possible sandbox analysis VM usernames

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks