Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

e8c91023fd...bf.exe

windows7-x64

7

e8c91023fd...bf.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8c91023fde3170eee83953872c1800e5251ad6af34e8ec651389e417ec720bf

  • Size

    2.1MB

  • Sample

    240703-evrghsxare

  • MD5

    0ece05cbb32cceaba6853d455b09bb6d

  • SHA1

    dff79169b9c701a18088b3171293f44b732e85df

  • SHA256

    e8c91023fde3170eee83953872c1800e5251ad6af34e8ec651389e417ec720bf

  • SHA512

    7ba9ea0e2e7d9fc084f83185c4e2f86d0ce145a40559ce2b8196eb0eb904903255b5fb2364346f8f82135fd6d9c75d4828cc776580c9314728ca1f6732adea0a

  • SSDEEP

    49152:VLM67z7t/7yZAsKVv/pun+AS2knlyAqB+XKY5jt:S67zx/7yZou+ASdlyRB+60jt

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      e8c91023fde3170eee83953872c1800e5251ad6af34e8ec651389e417ec720bf

    • Size

      2.1MB

    • MD5

      0ece05cbb32cceaba6853d455b09bb6d

    • SHA1

      dff79169b9c701a18088b3171293f44b732e85df

    • SHA256

      e8c91023fde3170eee83953872c1800e5251ad6af34e8ec651389e417ec720bf

    • SHA512

      7ba9ea0e2e7d9fc084f83185c4e2f86d0ce145a40559ce2b8196eb0eb904903255b5fb2364346f8f82135fd6d9c75d4828cc776580c9314728ca1f6732adea0a

    • SSDEEP

      49152:VLM67z7t/7yZAsKVv/pun+AS2knlyAqB+XKY5jt:S67zx/7yZou+ASdlyRB+60jt

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks