Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5fb9e7f3ff34b883e44df5d782cc42fa4f8a123c61efb1498a1e6a52608aac8d

  • Size

    931KB

  • Sample

    221124-kh91zsef6x

  • MD5

    5a74cb26962b45ca6d0c0370e7760fc9

  • SHA1

    ccd257237522a8138f29600a85d24b5345f8c58a

  • SHA256

    5fb9e7f3ff34b883e44df5d782cc42fa4f8a123c61efb1498a1e6a52608aac8d

  • SHA512

    85993ceaee23efeb37a36f1942b411b6ee4c4401c446dfaaa60a01b03978ac52591f21d9fda6b23daccf30b93fe1549879c03e976c5fe077e6ee833778506dff

  • SSDEEP

    24576:h1OYdaOVMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfi:h1Os3MWyUQ+GUVFIcHPvpfi

Malware Config

Targets

    • Target

      5fb9e7f3ff34b883e44df5d782cc42fa4f8a123c61efb1498a1e6a52608aac8d

    • Size

      931KB

    • MD5

      5a74cb26962b45ca6d0c0370e7760fc9

    • SHA1

      ccd257237522a8138f29600a85d24b5345f8c58a

    • SHA256

      5fb9e7f3ff34b883e44df5d782cc42fa4f8a123c61efb1498a1e6a52608aac8d

    • SHA512

      85993ceaee23efeb37a36f1942b411b6ee4c4401c446dfaaa60a01b03978ac52591f21d9fda6b23daccf30b93fe1549879c03e976c5fe077e6ee833778506dff

    • SSDEEP

      24576:h1OYdaOVMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfi:h1Os3MWyUQ+GUVFIcHPvpfi

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks