Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
7.2MB
-
Sample
221207-bl8gwsbf84
-
MD5
3097a50c0d4aac8b736f2af8f327e639
-
SHA1
6c7f829da938c7258845cbc8fbeb9700d49c030b
-
SHA256
e8195c6ada1d45011fb81ccebce276b8153b51604fc7a1d7406b4263213cc0b9
-
SHA512
310bc6b764d8031534e88abecf644dbb379d470cc923a90ae42c13f0810e6ebc7f20f94c2a0eee08b99ba7a5da9c2deeaf2444b45701e8c16f60651fbd02ffe9
-
SSDEEP
196608:91O2MnD9S486ziXa6h97baIOFopFxp9iN5tq9qnC:3OBk4vCdL7baICELe5tC
Malware Config
Targets
-
-
Target
file.exe
-
Size
7.2MB
-
MD5
3097a50c0d4aac8b736f2af8f327e639
-
SHA1
6c7f829da938c7258845cbc8fbeb9700d49c030b
-
SHA256
e8195c6ada1d45011fb81ccebce276b8153b51604fc7a1d7406b4263213cc0b9
-
SHA512
310bc6b764d8031534e88abecf644dbb379d470cc923a90ae42c13f0810e6ebc7f20f94c2a0eee08b99ba7a5da9c2deeaf2444b45701e8c16f60651fbd02ffe9
-
SSDEEP
196608:91O2MnD9S486ziXa6h97baIOFopFxp9iN5tq9qnC:3OBk4vCdL7baICELe5tC
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-