Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5UUHP_Built.exe
-
Size
6.9MB
-
Sample
241014-twabystgrg
-
MD5
f760292c0a8c2dfd7802fb98988fa169
-
SHA1
376dc5485837e855f2c2db807c87c8b206e551d1
-
SHA256
0371fbb8cb808f20357038faabaa566585e37a234fc29fb981c690c08ca72cac
-
SHA512
e8f29bfbbf3d7d12e69c320aa8e86cbc1b7ef362eaff65bf628b53b5a53d4dd446adae78f73eda8a85f21a57ea9aafbe2a80cfb36c5451c4eca5200c0336e973
-
SSDEEP
98304:ABDjWM8JEE1r2CWamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIJ:AB0DeNTfm/pf+xk4dWRptrbWOjgrc
Behavioral task
behavioral1
Sample
5UUHP_Built.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5UUHP_Built.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
5UUHP_Built.exe
-
Size
6.9MB
-
MD5
f760292c0a8c2dfd7802fb98988fa169
-
SHA1
376dc5485837e855f2c2db807c87c8b206e551d1
-
SHA256
0371fbb8cb808f20357038faabaa566585e37a234fc29fb981c690c08ca72cac
-
SHA512
e8f29bfbbf3d7d12e69c320aa8e86cbc1b7ef362eaff65bf628b53b5a53d4dd446adae78f73eda8a85f21a57ea9aafbe2a80cfb36c5451c4eca5200c0336e973
-
SSDEEP
98304:ABDjWM8JEE1r2CWamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYKJJcGhEIJ:AB0DeNTfm/pf+xk4dWRptrbWOjgrc
-
Drops file in Drivers directory
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Obfuscated Files or Information
1Command Obfuscation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3