Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
250125-jvvamatldv_pw_infected.zip
-
Size
7.5MB
-
Sample
250125-kvf9favrbz
-
MD5
7ac0721b0ecfb0a81a6448cd4fd34b9d
-
SHA1
6634861d0120b62c1fd8e54a53b1f4e6cd3215ef
-
SHA256
4372aabe77eb524fa8ea5ccc8db33a36e84a402ef5cd4b887e381e7c3c245dae
-
SHA512
ddb5c2521183c39fc787f82ac4e1a57b606c02d0defdb07b16ab89dad481800bf3b61103bdba6422a7d43d67e68392102ca6c300db25be4ea191f5412ba2c960
-
SSDEEP
196608:1iPv7Qj6Z5ntgXpVmIUBJKFqvNu/sBycG8Ou8ICk4dKkJE5:1iPjZ/tgXpVmRKFqFu/a08fCpEkm
Behavioral task
behavioral1
Sample
Pro hacker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Pro hacker.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
Pro hacker.exe
-
Size
7.6MB
-
MD5
f53b6e065812a8a47c4fff668aec20ed
-
SHA1
06b304521978a783038e99708ff2ecfd54899f8f
-
SHA256
81a0e82d509ea367d93f1dba72621e320ab4c0207d7b45e8808401d1e1fc6199
-
SHA512
5d25ba70a1e27d5379d8a7b53bd620e2a8bef5a54c54edc0cf640d7d94a0a9bf241ce21a1b3fd3ee0b1dea8c66e3bad8762758c3ab93141684aa0aaf573a71d0
-
SSDEEP
196608:RuD+kd+rVwfI9jUCBB7m+mKOY7rXrZusooDmhfvsbnTNWH:A54raIHL7HmBYXrYoaUNM
-
Drops file in Drivers directory
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Obfuscated Files or Information
1Command Obfuscation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3