Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    16366f55e2da7c93789b38c643c5c2e4a1aa327b84956ddfd59e817225cf63d1

  • Size

    2.1MB

  • Sample

    221125-y47dwacg38

  • MD5

    4be82de54cb869021802c36b90336308

  • SHA1

    5349b2738b15568bb40d6308fcb2667ddf773ab4

  • SHA256

    16366f55e2da7c93789b38c643c5c2e4a1aa327b84956ddfd59e817225cf63d1

  • SHA512

    73267b9a7d2781704b7db473dc163ad2525711341fbf9574ba2281d339acf434b230198c2a770ade6189bf2c3ea585211a749eb92f6f8d8d95d332ba984bb527

  • SSDEEP

    49152:h1Os4PtqGqK2M8f3h4UO2sEYYQvLZwQE5m4o2:h1OpHoxLYYaK

Malware Config

Targets

    • Target

      16366f55e2da7c93789b38c643c5c2e4a1aa327b84956ddfd59e817225cf63d1

    • Size

      2.1MB

    • MD5

      4be82de54cb869021802c36b90336308

    • SHA1

      5349b2738b15568bb40d6308fcb2667ddf773ab4

    • SHA256

      16366f55e2da7c93789b38c643c5c2e4a1aa327b84956ddfd59e817225cf63d1

    • SHA512

      73267b9a7d2781704b7db473dc163ad2525711341fbf9574ba2281d339acf434b230198c2a770ade6189bf2c3ea585211a749eb92f6f8d8d95d332ba984bb527

    • SSDEEP

      49152:h1Os4PtqGqK2M8f3h4UO2sEYYQvLZwQE5m4o2:h1OpHoxLYYaK

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks