Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9760073f13c6cad80564e040a06f118f98a5f817d4e4fe471112adb0cbaafebe

  • Size

    1.5MB

  • Sample

    221029-drykzshhh4

  • MD5

    c2085c88b1a58f92d08fd0aed38fa6a8

  • SHA1

    b064453495f5c0264406ee88b885154625ff240a

  • SHA256

    9760073f13c6cad80564e040a06f118f98a5f817d4e4fe471112adb0cbaafebe

  • SHA512

    317f1b013ee88f4e48cd62dc5aa6ab267b64bc637cb9afdd581a2ab1f07e4c1dd681b7cd4b25abdcb22c84a6ef062b45bab6249256a3a07cab25d9d39900eef4

  • SSDEEP

    24576:uHVoClwSpGV0rBTuH6w65P2cmz569SKlJ69VDGPrcOfB:ulw8XrRue5ucmz569SLGPrt5

Malware Config

Targets

    • Target

      9760073f13c6cad80564e040a06f118f98a5f817d4e4fe471112adb0cbaafebe

    • Size

      1.5MB

    • MD5

      c2085c88b1a58f92d08fd0aed38fa6a8

    • SHA1

      b064453495f5c0264406ee88b885154625ff240a

    • SHA256

      9760073f13c6cad80564e040a06f118f98a5f817d4e4fe471112adb0cbaafebe

    • SHA512

      317f1b013ee88f4e48cd62dc5aa6ab267b64bc637cb9afdd581a2ab1f07e4c1dd681b7cd4b25abdcb22c84a6ef062b45bab6249256a3a07cab25d9d39900eef4

    • SSDEEP

      24576:uHVoClwSpGV0rBTuH6w65P2cmz569SKlJ69VDGPrcOfB:ulw8XrRue5ucmz569SLGPrt5

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks