Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
262634c394e85c2ee77138dae9b0ef640a8d99589e9f9f7ebb4ed778ed278c47
-
Size
8.2MB
-
Sample
240914-v8qp5swepj
-
MD5
043d4a72233314a99bc3d0516272b492
-
SHA1
91c18b41ee030ab6d0c69b6bc4eb7df29f99e66e
-
SHA256
262634c394e85c2ee77138dae9b0ef640a8d99589e9f9f7ebb4ed778ed278c47
-
SHA512
1cc074e459e3096ba84e2fb578549d91ac80b0dadae150f45a9eae16290e00e92b6397df1e2e8efd98cb430153dd83a3ce38485f29bc0c7e7f3e6f8c0fcf22a9
-
SSDEEP
196608:dBg8VEvwfI9jUC2gYBYv3vbW4SEf+iITx1U6nR:k8VEkIH2gYBgDWZjTnzR
Behavioral task
behavioral1
Sample
262634c394e85c2ee77138dae9b0ef640a8d99589e9f9f7ebb4ed778ed278c47.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
262634c394e85c2ee77138dae9b0ef640a8d99589e9f9f7ebb4ed778ed278c47.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
262634c394e85c2ee77138dae9b0ef640a8d99589e9f9f7ebb4ed778ed278c47
-
Size
8.2MB
-
MD5
043d4a72233314a99bc3d0516272b492
-
SHA1
91c18b41ee030ab6d0c69b6bc4eb7df29f99e66e
-
SHA256
262634c394e85c2ee77138dae9b0ef640a8d99589e9f9f7ebb4ed778ed278c47
-
SHA512
1cc074e459e3096ba84e2fb578549d91ac80b0dadae150f45a9eae16290e00e92b6397df1e2e8efd98cb430153dd83a3ce38485f29bc0c7e7f3e6f8c0fcf22a9
-
SSDEEP
196608:dBg8VEvwfI9jUC2gYBYv3vbW4SEf+iITx1U6nR:k8VEkIH2gYBgDWZjTnzR
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Drops file in Drivers directory
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Obfuscated Files or Information
1Command Obfuscation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3