Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

c170c3e610...b0.exe

windows7-x64

7

c170c3e610...b0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c170c3e61015f4362e8d309ae96d27bf52dd7e8a0fbdea1a5bd94a1ed2c8ecb0

  • Size

    3.1MB

  • Sample

    240813-16dwfstekq

  • MD5

    5066ccc62fd8f9797533d66ffe6ca986

  • SHA1

    d0694f453cd8f7fa0b79e0dd62f4a14b9f074487

  • SHA256

    c170c3e61015f4362e8d309ae96d27bf52dd7e8a0fbdea1a5bd94a1ed2c8ecb0

  • SHA512

    957f2be3334675201e12a4746fddbb3956e9deb591b6a87426563c380db513dc182a03f67d3da1f6e0ca9d2e1c4590635abfaaa7844002cebd7f971ea116ab45

  • SSDEEP

    49152:BVAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:nA7VyRPS7MLq4ykF09+riyXWz6Ha

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c170c3e61015f4362e8d309ae96d27bf52dd7e8a0fbdea1a5bd94a1ed2c8ecb0

    • Size

      3.1MB

    • MD5

      5066ccc62fd8f9797533d66ffe6ca986

    • SHA1

      d0694f453cd8f7fa0b79e0dd62f4a14b9f074487

    • SHA256

      c170c3e61015f4362e8d309ae96d27bf52dd7e8a0fbdea1a5bd94a1ed2c8ecb0

    • SHA512

      957f2be3334675201e12a4746fddbb3956e9deb591b6a87426563c380db513dc182a03f67d3da1f6e0ca9d2e1c4590635abfaaa7844002cebd7f971ea116ab45

    • SSDEEP

      49152:BVAbw8VyRPkVwSdyKE6a8anqApzEVZnk8m0Uf89+zvi1QXsy4TpM+DWUl+n1aso:nA7VyRPS7MLq4ykF09+riyXWz6Ha

    Score
    8/10
    discoveryspywarestealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks