Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    705a8574cd36f8c54e92c5e30b8faf3df2fc4c51bbc365c4a86a61b3b41bf44d

  • Size

    313KB

  • Sample

    221014-la1ysahba5

  • MD5

    62265ca50550d481cdd9ac3d6076e230

  • SHA1

    ba92a49252ff28ebe8d878461f37bcbbbb19b003

  • SHA256

    705a8574cd36f8c54e92c5e30b8faf3df2fc4c51bbc365c4a86a61b3b41bf44d

  • SHA512

    8f8c11cb6583d17dc4a74fbe2ea1bc0d61b79ba8f7c3713209b099f75080456aaa60e582d0d90da45826fc7bdfae46b1cae6afe30c40acb3957229875c15e5a2

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sLtOgLYD9bEmUJ4RwdPjTe:91OgLda0OlD9An4R3

Malware Config

Targets

    • Target

      705a8574cd36f8c54e92c5e30b8faf3df2fc4c51bbc365c4a86a61b3b41bf44d

    • Size

      313KB

    • MD5

      62265ca50550d481cdd9ac3d6076e230

    • SHA1

      ba92a49252ff28ebe8d878461f37bcbbbb19b003

    • SHA256

      705a8574cd36f8c54e92c5e30b8faf3df2fc4c51bbc365c4a86a61b3b41bf44d

    • SHA512

      8f8c11cb6583d17dc4a74fbe2ea1bc0d61b79ba8f7c3713209b099f75080456aaa60e582d0d90da45826fc7bdfae46b1cae6afe30c40acb3957229875c15e5a2

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sLtOgLYD9bEmUJ4RwdPjTe:91OgLda0OlD9An4R3

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks