Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6dd2bb6b8ab1bec7900b8e64cd9dddfaa286ff6f9662513588eb9285f4ae4a4b

  • Size

    447KB

  • Sample

    221020-n82dbacgbk

  • MD5

    73f9af26ca6b395200133e11a0699b30

  • SHA1

    2b14b8174a604d464e1d04d09a76186533b1a6d4

  • SHA256

    6dd2bb6b8ab1bec7900b8e64cd9dddfaa286ff6f9662513588eb9285f4ae4a4b

  • SHA512

    a512f62e37adf304878b8597ba105ed26d4d68b80e4d18217e864d18939a19b1d0638f95d17a6074a7ac275424cdfaa2fc324e11b9faf55054e32b04b44cc7d1

  • SSDEEP

    6144:HVcOg2m1np42Xvc7M9IqBJnOqZCQmRpzc9BX6Tk0MzYRKK/O0LqgrQepCYtWYWR:1cOg2Ga2fymDt4Drof6TkVfgrppC8T+

Malware Config

Targets

    • Target

      6dd2bb6b8ab1bec7900b8e64cd9dddfaa286ff6f9662513588eb9285f4ae4a4b

    • Size

      447KB

    • MD5

      73f9af26ca6b395200133e11a0699b30

    • SHA1

      2b14b8174a604d464e1d04d09a76186533b1a6d4

    • SHA256

      6dd2bb6b8ab1bec7900b8e64cd9dddfaa286ff6f9662513588eb9285f4ae4a4b

    • SHA512

      a512f62e37adf304878b8597ba105ed26d4d68b80e4d18217e864d18939a19b1d0638f95d17a6074a7ac275424cdfaa2fc324e11b9faf55054e32b04b44cc7d1

    • SSDEEP

      6144:HVcOg2m1np42Xvc7M9IqBJnOqZCQmRpzc9BX6Tk0MzYRKK/O0LqgrQepCYtWYWR:1cOg2Ga2fymDt4Drof6TkVfgrppC8T+

    • Modifies visibility of file extensions in Explorer

    • UAC bypass

    • Executes dropped EXE

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks