Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fc7c206ca02a9b32c38a24f900f683c46848f7d4722bc89b80425fb53a635dac

  • Size

    925KB

  • Sample

    221124-nrpcesed6z

  • MD5

    3de2d219f6833c8a99b0885cdd479efb

  • SHA1

    0f9ae6b0c96b38c54423b5ca93416fda98239b6c

  • SHA256

    fc7c206ca02a9b32c38a24f900f683c46848f7d4722bc89b80425fb53a635dac

  • SHA512

    cb80e68a92956c3d1421cf501a67263df0d3cead805ae9507deab3a1220df0121052d87c22f78c260e4928be0f15caf04a40bfc91763166eb9edc20573bbead8

  • SSDEEP

    24576:h1OYdaOCfC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuX6:h1OsbMN6wdBh5N5Z4E8PuX6

Malware Config

Targets

    • Target

      fc7c206ca02a9b32c38a24f900f683c46848f7d4722bc89b80425fb53a635dac

    • Size

      925KB

    • MD5

      3de2d219f6833c8a99b0885cdd479efb

    • SHA1

      0f9ae6b0c96b38c54423b5ca93416fda98239b6c

    • SHA256

      fc7c206ca02a9b32c38a24f900f683c46848f7d4722bc89b80425fb53a635dac

    • SHA512

      cb80e68a92956c3d1421cf501a67263df0d3cead805ae9507deab3a1220df0121052d87c22f78c260e4928be0f15caf04a40bfc91763166eb9edc20573bbead8

    • SSDEEP

      24576:h1OYdaOCfC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuX6:h1OsbMN6wdBh5N5Z4E8PuX6

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks