2aa676aaccac9ec5070dd297d53a48f331b34d06a8e73f7c9a05b3551c7a5f03 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2aa676aacc...3N.exe

windows7-x64

7

2aa676aacc...3N.exe

windows10-2004-x64

7

Sharing

General

Target

2aa676aaccac9ec5070dd297d53a48f331b34d06a8e73f7c9a05b3551c7a5f03N
Size

1.3MB
Sample

240927-zaj7xsyakp
MD5

e540269df92e90ebdd4777871e1a4d20
SHA1

2dc0438b93891a73df8bc1ada6a4133d3de0ac48
SHA256

2aa676aaccac9ec5070dd297d53a48f331b34d06a8e73f7c9a05b3551c7a5f03
SHA512

e013dad07e384b28fa024aa20a6f50f7d76a377dd0c8af6cf0972ea54f85786c6ddb9bc4d0e4158112057220274d684b3db7f350f307cc83726062e165ad1f41
SSDEEP

12288:H3C7s+X/hXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:8s+XpsqjnhMgeiCl7G0nehbGZpbD

Score

7^/10

discovery spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2aa676aaccac9ec5070dd297d53a48f331b34d06a8e73f7c9a05b3551c7a5f03N.exe

Resource

win7-20240903-en

discovery spyware stealer

windows7-x64

18 signatures

120 seconds

Behavioral task

behavioral2

Sample

2aa676aaccac9ec5070dd297d53a48f331b34d06a8e73f7c9a05b3551c7a5f03N.exe

Resource

win10v2004-20240802-en

discovery spyware stealer

windows10-2004-x64

15 signatures

120 seconds

Malware Config

Targets

- Target
  
  2aa676aaccac9ec5070dd297d53a48f331b34d06a8e73f7c9a05b3551c7a5f03N
- Size
  
  1.3MB
- MD5
  
  e540269df92e90ebdd4777871e1a4d20
- SHA1
  
  2dc0438b93891a73df8bc1ada6a4133d3de0ac48
- SHA256
  
  2aa676aaccac9ec5070dd297d53a48f331b34d06a8e73f7c9a05b3551c7a5f03
- SHA512
  
  e013dad07e384b28fa024aa20a6f50f7d76a377dd0c8af6cf0972ea54f85786c6ddb9bc4d0e4158112057220274d684b3db7f350f307cc83726062e165ad1f41
- SSDEEP
  
  12288:H3C7s+X/hXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:8s+XpsqjnhMgeiCl7G0nehbGZpbD
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.