Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ab70e546b889a419370ec1b128a278f89b610cff27360b2405dc900128e8ae0b

  • Size

    736KB

  • Sample

    221030-dxltdaacf4

  • MD5

    84a20e79c3b5c5de1a34e153dad359fe

  • SHA1

    56aedb1d58fabe505891fb93c351bd35de4c8644

  • SHA256

    ab70e546b889a419370ec1b128a278f89b610cff27360b2405dc900128e8ae0b

  • SHA512

    de7de2cd9bcf19dfac6072be03b69ebb9627d2aa61e9e63412a9333d0addd5363fd4b525575111429cc9a5b39ad9a3399d94708c8f74d48562d0b19d6452a865

  • SSDEEP

    6144:ijTwjof6xvJQrQMoahlJeHrs4aIEVkONMDjNbAN2MpOXR0y0XU2xTA7Da0O85wID:f4iWQMDHeHrnQNpS0ykKyIEAcIZJ

Malware Config

Targets

    • Target

      ab70e546b889a419370ec1b128a278f89b610cff27360b2405dc900128e8ae0b

    • Size

      736KB

    • MD5

      84a20e79c3b5c5de1a34e153dad359fe

    • SHA1

      56aedb1d58fabe505891fb93c351bd35de4c8644

    • SHA256

      ab70e546b889a419370ec1b128a278f89b610cff27360b2405dc900128e8ae0b

    • SHA512

      de7de2cd9bcf19dfac6072be03b69ebb9627d2aa61e9e63412a9333d0addd5363fd4b525575111429cc9a5b39ad9a3399d94708c8f74d48562d0b19d6452a865

    • SSDEEP

      6144:ijTwjof6xvJQrQMoahlJeHrs4aIEVkONMDjNbAN2MpOXR0y0XU2xTA7Da0O85wID:f4iWQMDHeHrnQNpS0ykKyIEAcIZJ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks