Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    36ef87cd5d4eaa66a47f4e951854080804c56083871400907f40b0e6f9c4e507

  • Size

    4.5MB

  • Sample

    221125-w2jhxsef72

  • MD5

    55e098a817c0f37fca65e8cbc06d38f2

  • SHA1

    b413365b20ede4cc1a1a2bf7df7674ff90ee909b

  • SHA256

    36ef87cd5d4eaa66a47f4e951854080804c56083871400907f40b0e6f9c4e507

  • SHA512

    56466b50f144933865063a300b6c218007b5ef3a9be839d5d6c8421cf5d2735c90918088eb249563952da681bcb4bd6c5b7b5c528a0d45a18a1ce88cea806882

  • SSDEEP

    98304:HypOj4chk6omZFvfG4V+SKa6sfGJUmRRNVimdKiy2kSiGw5vDOj4chEU:HyehEmbfdVLGNRHHKIkRJ0hEU

Malware Config

Targets

    • Target

      36ef87cd5d4eaa66a47f4e951854080804c56083871400907f40b0e6f9c4e507

    • Size

      4.5MB

    • MD5

      55e098a817c0f37fca65e8cbc06d38f2

    • SHA1

      b413365b20ede4cc1a1a2bf7df7674ff90ee909b

    • SHA256

      36ef87cd5d4eaa66a47f4e951854080804c56083871400907f40b0e6f9c4e507

    • SHA512

      56466b50f144933865063a300b6c218007b5ef3a9be839d5d6c8421cf5d2735c90918088eb249563952da681bcb4bd6c5b7b5c528a0d45a18a1ce88cea806882

    • SSDEEP

      98304:HypOj4chk6omZFvfG4V+SKa6sfGJUmRRNVimdKiy2kSiGw5vDOj4chEU:HyehEmbfdVLGNRHHKIkRJ0hEU

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks