Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

1

file.exe

windows7-x64

9

file.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    1.2MB

  • Sample

    240818-xhgewsycla

  • MD5

    ed97dd4ca80d8c2861b05ac6a3d62ea0

  • SHA1

    faec25a43898b884f0a6efff6caa953e14ffbc17

  • SHA256

    cc2a152497a5c741a54644cbe47bbd441c839e832a47b3e932fa4bc93fe8c316

  • SHA512

    b91ab91a6acec2543dec29bc2c7f6c9bb11302405a1cf72fb34d8f0d66b7372c390ea8056233d4296a7fd2d410a5543f67c734954c251bc0d8ec7cf7b841b334

  • SSDEEP

    24576:UlhFMRqJRzwa38TNycVagP1zg5TNsLfW7QbOvFRYoaKziT4Cu7Bb4Pt:mT38NyczIqLfWvvFR2mA45x4l

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      1.2MB

    • MD5

      ed97dd4ca80d8c2861b05ac6a3d62ea0

    • SHA1

      faec25a43898b884f0a6efff6caa953e14ffbc17

    • SHA256

      cc2a152497a5c741a54644cbe47bbd441c839e832a47b3e932fa4bc93fe8c316

    • SHA512

      b91ab91a6acec2543dec29bc2c7f6c9bb11302405a1cf72fb34d8f0d66b7372c390ea8056233d4296a7fd2d410a5543f67c734954c251bc0d8ec7cf7b841b334

    • SSDEEP

      24576:UlhFMRqJRzwa38TNycVagP1zg5TNsLfW7QbOvFRYoaKziT4Cu7Bb4Pt:mT38NyczIqLfWvvFR2mA45x4l

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks