Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2c89314a17c22418d67be206b90dd61edc59bad46bb7c87cec953c801783d885

  • Size

    2.1MB

  • Sample

    221125-y31jyafe2y

  • MD5

    ee0d4596fd46268ae47bdfe040376b4f

  • SHA1

    3c7c15591bccfeb756a125cac06fe5a85a03a439

  • SHA256

    2c89314a17c22418d67be206b90dd61edc59bad46bb7c87cec953c801783d885

  • SHA512

    257a6066f35e19d208a45853b6e198cfaedff87e5f2e1e4f28cb5f662129a0dbbc9406b0629b28369e14d61f64a2fe3afee38ddf15c78ec0f076d2d06d147c0a

  • SSDEEP

    49152:h1OsTNB2tcyUoc3slSeZrg1JclQ35sFDRR:h1O036Eoc3UK0bX

Malware Config

Targets

    • Target

      2c89314a17c22418d67be206b90dd61edc59bad46bb7c87cec953c801783d885

    • Size

      2.1MB

    • MD5

      ee0d4596fd46268ae47bdfe040376b4f

    • SHA1

      3c7c15591bccfeb756a125cac06fe5a85a03a439

    • SHA256

      2c89314a17c22418d67be206b90dd61edc59bad46bb7c87cec953c801783d885

    • SHA512

      257a6066f35e19d208a45853b6e198cfaedff87e5f2e1e4f28cb5f662129a0dbbc9406b0629b28369e14d61f64a2fe3afee38ddf15c78ec0f076d2d06d147c0a

    • SSDEEP

      49152:h1OsTNB2tcyUoc3slSeZrg1JclQ35sFDRR:h1O036Eoc3UK0bX

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks