Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7ee91c85340f367217b09114538dff636544c562aa3345509f446f9410113f09

  • Size

    931KB

  • Sample

    221124-msfagaha49

  • MD5

    1e356baf384dba03822e70c8cb68b4b8

  • SHA1

    7de2ff14af475d457b07bd9ecb21b7f13121a0a8

  • SHA256

    7ee91c85340f367217b09114538dff636544c562aa3345509f446f9410113f09

  • SHA512

    3fdeb9b77bde4fefc5ebcb4a3f1ce1b0151915eb3d35aa400235fbacf8e32c48607922fd61476e516e3e3510704c536d02c5acf95160d902254e2fd16a4f5c1c

  • SSDEEP

    24576:h1OYdaO3MWSUbvCXEQKSqGv8VWumF6RmcJozyPvpf3:h1OshMWyUQ+GUVFIcHPvpf3

Malware Config

Targets

    • Target

      7ee91c85340f367217b09114538dff636544c562aa3345509f446f9410113f09

    • Size

      931KB

    • MD5

      1e356baf384dba03822e70c8cb68b4b8

    • SHA1

      7de2ff14af475d457b07bd9ecb21b7f13121a0a8

    • SHA256

      7ee91c85340f367217b09114538dff636544c562aa3345509f446f9410113f09

    • SHA512

      3fdeb9b77bde4fefc5ebcb4a3f1ce1b0151915eb3d35aa400235fbacf8e32c48607922fd61476e516e3e3510704c536d02c5acf95160d902254e2fd16a4f5c1c

    • SSDEEP

      24576:h1OYdaO3MWSUbvCXEQKSqGv8VWumF6RmcJozyPvpf3:h1OshMWyUQ+GUVFIcHPvpf3

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks