Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7cb8f2010007aeb58669ae9d07c3daf2236094811e465a297c36ad6e8b6437b3

  • Size

    247KB

  • Sample

    221127-tf5sxsac35

  • MD5

    8ac218fb2468058800aff6680f9bad82

  • SHA1

    e32cacb4576becffc229fc3d61da52151668368a

  • SHA256

    7cb8f2010007aeb58669ae9d07c3daf2236094811e465a297c36ad6e8b6437b3

  • SHA512

    5e2e722cf8cf0b7b342b2faf4b42535c1e01771928e15b74befbf7f8764eb561606783c4a5b9a57038cc7d244b2d433107254108728d4c83149dd36869f72587

  • SSDEEP

    6144:Mse8rPLbShV71xut8g6MgddYULGt/5JNfG:jTPaj71xA89MSY5/53f

Malware Config

Targets

    • Target

      7cb8f2010007aeb58669ae9d07c3daf2236094811e465a297c36ad6e8b6437b3

    • Size

      247KB

    • MD5

      8ac218fb2468058800aff6680f9bad82

    • SHA1

      e32cacb4576becffc229fc3d61da52151668368a

    • SHA256

      7cb8f2010007aeb58669ae9d07c3daf2236094811e465a297c36ad6e8b6437b3

    • SHA512

      5e2e722cf8cf0b7b342b2faf4b42535c1e01771928e15b74befbf7f8764eb561606783c4a5b9a57038cc7d244b2d433107254108728d4c83149dd36869f72587

    • SSDEEP

      6144:Mse8rPLbShV71xut8g6MgddYULGt/5JNfG:jTPaj71xA89MSY5/53f

    • Blocklisted process makes network request

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks