Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    be57694addae2dceb7c2496f75d0d08ff072d01067685f4db9b002d254e1b7da

  • Size

    588KB

  • Sample

    221206-t1813sgh31

  • MD5

    fabd0aa4664857a9d48e366d912f0376

  • SHA1

    ff5ea6754a3c37018e70fabdb72281810b737d21

  • SHA256

    be57694addae2dceb7c2496f75d0d08ff072d01067685f4db9b002d254e1b7da

  • SHA512

    d07b5cad79ac28f790293442acd063362b8bf3d66ebc7db4296e6271bd90538c2ba104bdf02aa2097d216c7b68d10144851a6357632f27bc062f5cba74b2a715

  • SSDEEP

    12288:bXc2TihIJ0qhxIzLLiQCWLU0gnkUr/5gZxAdT96nkPte0w2fSpMO:bXBWGvcCWzgzy7eT4kPteZ26yO

Score
7/10

Malware Config

Targets

    • Target

      be57694addae2dceb7c2496f75d0d08ff072d01067685f4db9b002d254e1b7da

    • Size

      588KB

    • MD5

      fabd0aa4664857a9d48e366d912f0376

    • SHA1

      ff5ea6754a3c37018e70fabdb72281810b737d21

    • SHA256

      be57694addae2dceb7c2496f75d0d08ff072d01067685f4db9b002d254e1b7da

    • SHA512

      d07b5cad79ac28f790293442acd063362b8bf3d66ebc7db4296e6271bd90538c2ba104bdf02aa2097d216c7b68d10144851a6357632f27bc062f5cba74b2a715

    • SSDEEP

      12288:bXc2TihIJ0qhxIzLLiQCWLU0gnkUr/5gZxAdT96nkPte0w2fSpMO:bXBWGvcCWzgzy7eT4kPteZ26yO

    Score
    7/10
    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks