Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9581ef512f588f4dcb4415299ae035d18cc0e1fc6a322a582be8733928d46b33

  • Size

    170KB

  • Sample

    221205-xlrd9sfe97

  • MD5

    307470952c744dd7933bc4ebac9e8951

  • SHA1

    80e7c601d3c028e611032daccbdc36675e31f8f7

  • SHA256

    9581ef512f588f4dcb4415299ae035d18cc0e1fc6a322a582be8733928d46b33

  • SHA512

    d8f254aacbb93cd76b01bb4ebf108c03c8d2e04fb7f59b6810c5cc67d09bac1a265df70e27cb509b01e6910a27e06f2342817f4f5c028a2f31bb4079a0d8cc60

  • SSDEEP

    3072:w5A4b8drcTgxzKWcNiB5H41fFi9JBvxNpfV8jvhNeh3SqMyDZ:IA4b8V2g9KGYFGJBvn8jvzejhN

Malware Config

Targets

    • Target

      9581ef512f588f4dcb4415299ae035d18cc0e1fc6a322a582be8733928d46b33

    • Size

      170KB

    • MD5

      307470952c744dd7933bc4ebac9e8951

    • SHA1

      80e7c601d3c028e611032daccbdc36675e31f8f7

    • SHA256

      9581ef512f588f4dcb4415299ae035d18cc0e1fc6a322a582be8733928d46b33

    • SHA512

      d8f254aacbb93cd76b01bb4ebf108c03c8d2e04fb7f59b6810c5cc67d09bac1a265df70e27cb509b01e6910a27e06f2342817f4f5c028a2f31bb4079a0d8cc60

    • SSDEEP

      3072:w5A4b8drcTgxzKWcNiB5H41fFi9JBvxNpfV8jvhNeh3SqMyDZ:IA4b8V2g9KGYFGJBvn8jvzejhN

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks