Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

SecuriteIn...94.exe

windows7-x64

7

SecuriteIn...94.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Program.Unwanted.5599.24375.1194.exe

  • Size

    21.5MB

  • Sample

    250328-eam9cstlx2

  • MD5

    148d636231401a42505e096ae2a3d31e

  • SHA1

    53261dfeeb8ba52b86cf82180fed669e52984519

  • SHA256

    db3e5db9746c7222963c28c9411c8c7d2faac25f1f05ee5651145334b807a605

  • SHA512

    1a8ed377117d3fe7fad8babfeffd11968d5cba76d50e0a436462348f6aca0ed7dfbdd8eb3d289923630a4a28c1ed79fd241d2cb0a88b5d4d1dbb571f9545f32f

  • SSDEEP

    393216:watZoxR0iWhfetojPSyJPGXscPZf0+IMzeioZNfSMe9zQkPR5h8AmDNqFBtItS7K:w2KYhfnxGfBc+zeioZN/ozQk98AmDy5S

Score
7/10
bootkitdiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      SecuriteInfo.com.Program.Unwanted.5599.24375.1194.exe

    • Size

      21.5MB

    • MD5

      148d636231401a42505e096ae2a3d31e

    • SHA1

      53261dfeeb8ba52b86cf82180fed669e52984519

    • SHA256

      db3e5db9746c7222963c28c9411c8c7d2faac25f1f05ee5651145334b807a605

    • SHA512

      1a8ed377117d3fe7fad8babfeffd11968d5cba76d50e0a436462348f6aca0ed7dfbdd8eb3d289923630a4a28c1ed79fd241d2cb0a88b5d4d1dbb571f9545f32f

    • SSDEEP

      393216:watZoxR0iWhfetojPSyJPGXscPZf0+IMzeioZNfSMe9zQkPR5h8AmDNqFBtItS7K:w2KYhfnxGfBc+zeioZN/ozQk98AmDy5S

    Score
    7/10
    discoveryspywarestealerbootkitpersistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks