Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Built.exe
-
Size
6.9MB
-
Sample
250124-21w1hsvkcr
-
MD5
faa6cb1809527998e2f98b222f74ca49
-
SHA1
8a259949d90da7821eccb7757233e1e423a1d5be
-
SHA256
26926d6e7f9e847073ae1c08d63c0d644f3a6cb5b79a5616b36376e431e4336b
-
SHA512
734455652f77df8e926ef33ea9b21e0863a08ebebbdf0341362c4f5f4ed980e0c5b5676034f718448dce92f2315b9284e3b7d44b19d86965721d3441823437b7
-
SSDEEP
98304:aKDjWM8JEE1FZ+QamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRiYRJJcGhEIw:aK0eeNTfm/pf+xk4dWRimrbW3jmyV
Behavioral task
behavioral1
Sample
Built.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
Built.exe
-
Size
6.9MB
-
MD5
faa6cb1809527998e2f98b222f74ca49
-
SHA1
8a259949d90da7821eccb7757233e1e423a1d5be
-
SHA256
26926d6e7f9e847073ae1c08d63c0d644f3a6cb5b79a5616b36376e431e4336b
-
SHA512
734455652f77df8e926ef33ea9b21e0863a08ebebbdf0341362c4f5f4ed980e0c5b5676034f718448dce92f2315b9284e3b7d44b19d86965721d3441823437b7
-
SSDEEP
98304:aKDjWM8JEE1FZ+QamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRiYRJJcGhEIw:aK0eeNTfm/pf+xk4dWRimrbW3jmyV
-
Drops file in Drivers directory
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
Hide Artifacts: Hidden Files and Directories
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Obfuscated Files or Information
1Command Obfuscation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Process Discovery
1Query Registry
1Remote System Discovery
1System Information Discovery
4System Network Configuration Discovery
2Internet Connection Discovery
1Wi-Fi Discovery
1