Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    75c13209cd3390e1bf2fdc3e05e30fcf028aa9c84f30bc77c1c38ebe459f5808

  • Size

    55KB

  • Sample

    221019-2f92msbce6

  • MD5

    91ec816818297ee79d14a61bdb20e530

  • SHA1

    60c50c45ee6fcfbc392ebb504091096df95367f4

  • SHA256

    75c13209cd3390e1bf2fdc3e05e30fcf028aa9c84f30bc77c1c38ebe459f5808

  • SHA512

    f7db427ecb2a6220d26a33812e23bf3271441531951d0237f49efad59889871e81e14cb93596395cbd1a80dab244ae29c47dcbf0d3a65ba2db47e1f0e5debbe2

  • SSDEEP

    1536:NQ16/eLLlTV/mGLfK+P/Rrh0anLF4vqUtrq+CbVj/kI7voN3NVNFcRbsENDYEQ24:N4DFK4VJ5q0G

Malware Config

Targets

    • Target

      75c13209cd3390e1bf2fdc3e05e30fcf028aa9c84f30bc77c1c38ebe459f5808

    • Size

      55KB

    • MD5

      91ec816818297ee79d14a61bdb20e530

    • SHA1

      60c50c45ee6fcfbc392ebb504091096df95367f4

    • SHA256

      75c13209cd3390e1bf2fdc3e05e30fcf028aa9c84f30bc77c1c38ebe459f5808

    • SHA512

      f7db427ecb2a6220d26a33812e23bf3271441531951d0237f49efad59889871e81e14cb93596395cbd1a80dab244ae29c47dcbf0d3a65ba2db47e1f0e5debbe2

    • SSDEEP

      1536:NQ16/eLLlTV/mGLfK+P/Rrh0anLF4vqUtrq+CbVj/kI7voN3NVNFcRbsENDYEQ24:N4DFK4VJ5q0G

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks