Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4e404cefee299dd408293ae870b152010a7a55b99fb5eb9dc1a25133e36dca8a

  • Size

    1020KB

  • Sample

    221001-zws2ysfdh5

  • MD5

    600024d0bb5e11ca9b0910cfe5c974e7

  • SHA1

    975eb3deec630e2f94457ca1d98d432c07d1a019

  • SHA256

    4e404cefee299dd408293ae870b152010a7a55b99fb5eb9dc1a25133e36dca8a

  • SHA512

    e71528a2f4d20b8edc26fbaed07f17393c5806d9c8ee9db28140a12de2263de63960165de7235c8db6abf3e3464fd46bfac11ec1f250208b487ee3eedc6d1f28

  • SSDEEP

    24576:jJx54lw1gZ6sd0fZwPHbAsk9us46+Q4cX9SZKlMnzhW:lIlw1gwquCPHbG+OXoyMnzhW

Malware Config

Targets

    • Target

      4e404cefee299dd408293ae870b152010a7a55b99fb5eb9dc1a25133e36dca8a

    • Size

      1020KB

    • MD5

      600024d0bb5e11ca9b0910cfe5c974e7

    • SHA1

      975eb3deec630e2f94457ca1d98d432c07d1a019

    • SHA256

      4e404cefee299dd408293ae870b152010a7a55b99fb5eb9dc1a25133e36dca8a

    • SHA512

      e71528a2f4d20b8edc26fbaed07f17393c5806d9c8ee9db28140a12de2263de63960165de7235c8db6abf3e3464fd46bfac11ec1f250208b487ee3eedc6d1f28

    • SSDEEP

      24576:jJx54lw1gZ6sd0fZwPHbAsk9us46+Q4cX9SZKlMnzhW:lIlw1gwquCPHbG+OXoyMnzhW

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks