Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

b2f376d9ab...41.exe

windows7-x64

7

b2f376d9ab...41.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2f376d9ab1f42d1e48dbfed0d74f53c28d5170c0e24175c0ed7383def1c5941

  • Size

    461KB

  • Sample

    240707-ctsxvatcmf

  • MD5

    e9df94b5fa570022caf1e2171c8a4258

  • SHA1

    c840b1ce87091982fb4edff8893ae3ebda1056a5

  • SHA256

    b2f376d9ab1f42d1e48dbfed0d74f53c28d5170c0e24175c0ed7383def1c5941

  • SHA512

    01562480d162ea3e70807164dc88c4e06de07529f50dbcca6965ef4d22bd81771ffdc2ce2927a102801d6f6e3869b1a07a8a2c03a9d945a96808ecdcf9d87d36

  • SSDEEP

    12288:A//vi9BWTynRVOQP0O3ZSVtWN6Zu1qqqxRCunJ+:2wW8LOE9NE25qxRCH

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      b2f376d9ab1f42d1e48dbfed0d74f53c28d5170c0e24175c0ed7383def1c5941

    • Size

      461KB

    • MD5

      e9df94b5fa570022caf1e2171c8a4258

    • SHA1

      c840b1ce87091982fb4edff8893ae3ebda1056a5

    • SHA256

      b2f376d9ab1f42d1e48dbfed0d74f53c28d5170c0e24175c0ed7383def1c5941

    • SHA512

      01562480d162ea3e70807164dc88c4e06de07529f50dbcca6965ef4d22bd81771ffdc2ce2927a102801d6f6e3869b1a07a8a2c03a9d945a96808ecdcf9d87d36

    • SSDEEP

      12288:A//vi9BWTynRVOQP0O3ZSVtWN6Zu1qqqxRCunJ+:2wW8LOE9NE25qxRCH

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks