Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    108104efacb79495b219b8da1ed1cbb648f333f1abcc128c062a41386b48689a

  • Size

    924KB

  • Sample

    221124-ngx7ksdg2w

  • MD5

    a9425ef9a256645bead9a4b7133bfd94

  • SHA1

    9132024b34110b8600a3d4eda07fd2f0f5820a25

  • SHA256

    108104efacb79495b219b8da1ed1cbb648f333f1abcc128c062a41386b48689a

  • SHA512

    7a5d3cc611b1f40341ce6f3120901d67d11cc6c665e679cc85dae0f1218a24c7fa61511de98020ca139d6b8a631b1b8a54dc28bb79886cd9a5998691a78b6321

  • SSDEEP

    24576:h1OYdaO/fC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuXX:h1OsGMN6wdBh5N5Z4E8PuXX

Malware Config

Targets

    • Target

      108104efacb79495b219b8da1ed1cbb648f333f1abcc128c062a41386b48689a

    • Size

      924KB

    • MD5

      a9425ef9a256645bead9a4b7133bfd94

    • SHA1

      9132024b34110b8600a3d4eda07fd2f0f5820a25

    • SHA256

      108104efacb79495b219b8da1ed1cbb648f333f1abcc128c062a41386b48689a

    • SHA512

      7a5d3cc611b1f40341ce6f3120901d67d11cc6c665e679cc85dae0f1218a24c7fa61511de98020ca139d6b8a631b1b8a54dc28bb79886cd9a5998691a78b6321

    • SSDEEP

      24576:h1OYdaO/fC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuXX:h1OsGMN6wdBh5N5Z4E8PuXX

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks