Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b5ea8c3484fbe15dd92222aa7b9227aea85595438c1961b4153319662c813902

  • Size

    924KB

  • Sample

    221124-gglefsfe9x

  • MD5

    d2787fc117f2fd1f3ad8146d4bb5742f

  • SHA1

    b9082093b04a24afd07bcbbe51693eaa4ee2abce

  • SHA256

    b5ea8c3484fbe15dd92222aa7b9227aea85595438c1961b4153319662c813902

  • SHA512

    caa0ecaff516faaf8c6ba700b8603d159d9515ca00c8c35e0a4fdb0644f48e5b1d75a362ad63d2f6143d3cb1809ff1c52a8a5da51f603642dab4b04c9341a4c1

  • SSDEEP

    24576:h1OYdaOofC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuX0:h1OsVMN6wdBh5N5Z4E8PuX0

Malware Config

Targets

    • Target

      b5ea8c3484fbe15dd92222aa7b9227aea85595438c1961b4153319662c813902

    • Size

      924KB

    • MD5

      d2787fc117f2fd1f3ad8146d4bb5742f

    • SHA1

      b9082093b04a24afd07bcbbe51693eaa4ee2abce

    • SHA256

      b5ea8c3484fbe15dd92222aa7b9227aea85595438c1961b4153319662c813902

    • SHA512

      caa0ecaff516faaf8c6ba700b8603d159d9515ca00c8c35e0a4fdb0644f48e5b1d75a362ad63d2f6143d3cb1809ff1c52a8a5da51f603642dab4b04c9341a4c1

    • SSDEEP

      24576:h1OYdaOofC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuX0:h1OsVMN6wdBh5N5Z4E8PuX0

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks