Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
95s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
31/12/2024, 13:07
Behavioral task
behavioral1
Sample
source_prepared.exe
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
discord_token_grabber.pyc
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
get_cookies.pyc
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
misc.pyc
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
passwords_grabber.pyc
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
source_prepared.pyc
Resource
win11-20241007-en
General
-
Target
source_prepared.pyc
-
Size
64KB
-
MD5
1c71ffd73742306ca751d832353d8845
-
SHA1
00a43ddbe3eaa008ceb35922641bef5327246c46
-
SHA256
8287d8566890cc9e4829e8610aa54f31d93bd84a3ba127d3b382b379fdfcbbd8
-
SHA512
089679d1064687974ebfb1622f5bc4161a91b0bd86f81ae895d7de525d133bda56d1cf37d24fb491c6713f7e5e80ae97d2a5f7e854c4a9dc8f00c138fa1748d1
-
SSDEEP
768:Hoad+obVSwxUgmLkx7YbJCjeAppQ6BdjxCV9PSd5zk4Q5VdB5ozK6VX+Ei4i:HocpSomQxtjeCBdjx8O1kdB5oe6VXS4i
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2410826464-2353372766-2364966905-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2410826464-2353372766-2364966905-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3628 OpenWith.exe