Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3682b1fd400c5c6998f83decdd4a628f4b703e949361ec4ca72eab745b232d24

  • Size

    1.0MB

  • Sample

    221019-re1rgabeer

  • MD5

    8247cc9cfa6bb9d095b9891014c5f5a2

  • SHA1

    725c05e1eda1a75219b021cffddc5cb40796c6cf

  • SHA256

    3682b1fd400c5c6998f83decdd4a628f4b703e949361ec4ca72eab745b232d24

  • SHA512

    a8b45d0e663f62b54dbe6aee0c3b9115b8063f734a54499a330335fb0cbed8d3f1707c6e2f53626bc48e38e6979d253dc5a222a781f256b561bf21f9b9c764a4

  • SSDEEP

    24576:1g/DjFYYbq9Ia3EEa6X6sa+1Iae0tKhr343UOC3WNHY:k3bq9Ia3EE//71Iafts6UO68Y

Malware Config

Targets

    • Target

      3682b1fd400c5c6998f83decdd4a628f4b703e949361ec4ca72eab745b232d24

    • Size

      1.0MB

    • MD5

      8247cc9cfa6bb9d095b9891014c5f5a2

    • SHA1

      725c05e1eda1a75219b021cffddc5cb40796c6cf

    • SHA256

      3682b1fd400c5c6998f83decdd4a628f4b703e949361ec4ca72eab745b232d24

    • SHA512

      a8b45d0e663f62b54dbe6aee0c3b9115b8063f734a54499a330335fb0cbed8d3f1707c6e2f53626bc48e38e6979d253dc5a222a781f256b561bf21f9b9c764a4

    • SSDEEP

      24576:1g/DjFYYbq9Ia3EEa6X6sa+1Iae0tKhr343UOC3WNHY:k3bq9Ia3EE//71Iafts6UO68Y

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks