Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    85a20ea496b40b67f18bad44502a8c8d47b4281973de46933a50e9c1a5fab715

  • Size

    1.0MB

  • Sample

    221019-sg8erschf8

  • MD5

    81fb0adeb2ab54459b50262cfc56314f

  • SHA1

    84cc374f0272e01c9a8f32f1620c440ed0022e67

  • SHA256

    85a20ea496b40b67f18bad44502a8c8d47b4281973de46933a50e9c1a5fab715

  • SHA512

    9016dae62c3ab108eb18594582c85174704d411f68e5be3808e1d402e0212cdbcccdc391c05c7b119d1dac30a801e4468251c9b2d296897ac742f50b6a4f1cf9

  • SSDEEP

    24576:D9XXnoKaTTNAM0sOqSagzVIuOsrZUjYJxjgTIBsu7dmc/xr0:tXnoK6NVODagZOuZUj0gT+su7dmc/xw

Malware Config

Targets

    • Target

      85a20ea496b40b67f18bad44502a8c8d47b4281973de46933a50e9c1a5fab715

    • Size

      1.0MB

    • MD5

      81fb0adeb2ab54459b50262cfc56314f

    • SHA1

      84cc374f0272e01c9a8f32f1620c440ed0022e67

    • SHA256

      85a20ea496b40b67f18bad44502a8c8d47b4281973de46933a50e9c1a5fab715

    • SHA512

      9016dae62c3ab108eb18594582c85174704d411f68e5be3808e1d402e0212cdbcccdc391c05c7b119d1dac30a801e4468251c9b2d296897ac742f50b6a4f1cf9

    • SSDEEP

      24576:D9XXnoKaTTNAM0sOqSagzVIuOsrZUjYJxjgTIBsu7dmc/xr0:tXnoK6NVODagZOuZUj0gT+su7dmc/xw

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks