Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    be9afd1075ff3370be66d16a06d5ae3d8ff9870b7a25d8fa56eed442e39e8154

  • Size

    2.1MB

  • Sample

    221123-2newgaad32

  • MD5

    32fe0907c93de725f4c94a4bac6d5442

  • SHA1

    e5844655b0e4a30c65f4655000b5c5af3c078253

  • SHA256

    be9afd1075ff3370be66d16a06d5ae3d8ff9870b7a25d8fa56eed442e39e8154

  • SHA512

    8425042674035be1d483728bfd91396e70a1010488fa7a1b064c44b5bd3480c37e9d236b05f02cd238a25e384f1b430e29249861d00f3f6a7690e7c7b7149902

  • SSDEEP

    49152:h1Os+YIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSZ:h1Ordd9YMhKgq+4fY

Malware Config

Targets

    • Target

      be9afd1075ff3370be66d16a06d5ae3d8ff9870b7a25d8fa56eed442e39e8154

    • Size

      2.1MB

    • MD5

      32fe0907c93de725f4c94a4bac6d5442

    • SHA1

      e5844655b0e4a30c65f4655000b5c5af3c078253

    • SHA256

      be9afd1075ff3370be66d16a06d5ae3d8ff9870b7a25d8fa56eed442e39e8154

    • SHA512

      8425042674035be1d483728bfd91396e70a1010488fa7a1b064c44b5bd3480c37e9d236b05f02cd238a25e384f1b430e29249861d00f3f6a7690e7c7b7149902

    • SSDEEP

      49152:h1Os+YIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSZ:h1Ordd9YMhKgq+4fY

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks