Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

cryptolaemus

windows10-2004-x64

9

cryptolaemus

windows11-21h2-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a23a5230ed4282ec4305cab8af0f1c63607196759ecf1e372ebf75b692fa366d

  • Size

    89KB

  • Sample

    240823-xja99szhmg

  • MD5

    7cab78f145df4f96e4ba8239be447927

  • SHA1

    10c266f5dd413a08fa791477091e35df5158df6c

  • SHA256

    a23a5230ed4282ec4305cab8af0f1c63607196759ecf1e372ebf75b692fa366d

  • SHA512

    29493717ba9e54a4e1afad3ecfe02dc25d06125b675ce5f6f51196381941f9d5c4ec5ff50b816e6a3c960d2942579070217e3d9b69201e7974c1292183736e39

  • SSDEEP

    1536:L7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIf3xne8iO+:Hq6+ouCpk2mpcWJ0r+QNTBf39m

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      a23a5230ed4282ec4305cab8af0f1c63607196759ecf1e372ebf75b692fa366d

    • Size

      89KB

    • MD5

      7cab78f145df4f96e4ba8239be447927

    • SHA1

      10c266f5dd413a08fa791477091e35df5158df6c

    • SHA256

      a23a5230ed4282ec4305cab8af0f1c63607196759ecf1e372ebf75b692fa366d

    • SHA512

      29493717ba9e54a4e1afad3ecfe02dc25d06125b675ce5f6f51196381941f9d5c4ec5ff50b816e6a3c960d2942579070217e3d9b69201e7974c1292183736e39

    • SSDEEP

      1536:L7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIf3xne8iO+:Hq6+ouCpk2mpcWJ0r+QNTBf39m

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks