Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    df1070b80d5c5784190295d3843996668707058e030547b792d252ef7e972216

  • Size

    878KB

  • Sample

    221127-thw9kaad46

  • MD5

    f5a3c8c06d338f3ca301c69d7e44dd52

  • SHA1

    47eae1e227a26ee448639239fe4fc5e496807a39

  • SHA256

    df1070b80d5c5784190295d3843996668707058e030547b792d252ef7e972216

  • SHA512

    25653dab08d195e978b096eb8ae849c2513f7cf46f6da2236fa3329e7a07e69cd137457dc0d15ad6ee85f105c170f89d58c2450870091526a14d0015f3cbac21

  • SSDEEP

    24576:ihxL1EppKzCKYMNHIon7rKiSi9Y2uwVmXMI:61CwjigYPwVoMI

Malware Config

Targets

    • Target

      df1070b80d5c5784190295d3843996668707058e030547b792d252ef7e972216

    • Size

      878KB

    • MD5

      f5a3c8c06d338f3ca301c69d7e44dd52

    • SHA1

      47eae1e227a26ee448639239fe4fc5e496807a39

    • SHA256

      df1070b80d5c5784190295d3843996668707058e030547b792d252ef7e972216

    • SHA512

      25653dab08d195e978b096eb8ae849c2513f7cf46f6da2236fa3329e7a07e69cd137457dc0d15ad6ee85f105c170f89d58c2450870091526a14d0015f3cbac21

    • SSDEEP

      24576:ihxL1EppKzCKYMNHIon7rKiSi9Y2uwVmXMI:61CwjigYPwVoMI

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks