Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

cfd1cc8746...18.exe

windows7-x64

7

cfd1cc8746...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cfd1cc87468f8952f93116ce8a5da1ed0ddf11bc036e07332f2b2a9db65c6918

  • Size

    1.1MB

  • Sample

    240908-c3zrrazfmp

  • MD5

    b6f74448014cecdb8caee3fedb3495d4

  • SHA1

    b9e8e44c15e176ee2b4aaac4f00b0b53ed0e03ce

  • SHA256

    cfd1cc87468f8952f93116ce8a5da1ed0ddf11bc036e07332f2b2a9db65c6918

  • SHA512

    4b4ee28bb4416882c66ea4b81722fdd1033c6868f7557c32b292893f8ac02ca65f07d1102e1063fcc6b0ae5f11a0be72accacbc4093ceda4fc0d8d5c88b3f1fd

  • SSDEEP

    24576:jToaG6si/64FqsNBM/9/fwK/FTwfCBM0VZeg15:jT5sLsNBk9/fw2BwfmM0fV

Score
7/10
aspackv2discoverypersistencespywarestealer

Malware Config

Targets

    • Target

      cfd1cc87468f8952f93116ce8a5da1ed0ddf11bc036e07332f2b2a9db65c6918

    • Size

      1.1MB

    • MD5

      b6f74448014cecdb8caee3fedb3495d4

    • SHA1

      b9e8e44c15e176ee2b4aaac4f00b0b53ed0e03ce

    • SHA256

      cfd1cc87468f8952f93116ce8a5da1ed0ddf11bc036e07332f2b2a9db65c6918

    • SHA512

      4b4ee28bb4416882c66ea4b81722fdd1033c6868f7557c32b292893f8ac02ca65f07d1102e1063fcc6b0ae5f11a0be72accacbc4093ceda4fc0d8d5c88b3f1fd

    • SSDEEP

      24576:jToaG6si/64FqsNBM/9/fwK/FTwfCBM0VZeg15:jT5sLsNBk9/fw2BwfmM0fV

    Score
    7/10
    aspackv2discoverypersistencespywarestealer

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks