Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    geek.exe

  • Size

    6.3MB

  • Sample

    230109-slnadsef54

  • MD5

    234f314f904536e9ea73f52e1f0ffa13

  • SHA1

    430d72aad2930ef28d9270db87bb14260d3e613f

  • SHA256

    7142ba9a0a96e7184d8da2d5514d4416191494cc709f424f924ceb26332171ec

  • SHA512

    24c1e1b85486b49263ef4fdfc34f68f3b0f78f83da77e9a8fc0f8f27b51beaf25d70c64fd07c10e35a2593d359c742759a63c0ff985eea630c0588af96af49f0

  • SSDEEP

    98304:3qJbc5xtz+kl/m5lifMc/PKkuExnaZ/l+7Y1rtJKCg85:6Jk+y/mnifVKkbaZ/l+7Y1rtECg85

Malware Config

Targets

    • Target

      geek.exe

    • Size

      6.3MB

    • MD5

      234f314f904536e9ea73f52e1f0ffa13

    • SHA1

      430d72aad2930ef28d9270db87bb14260d3e613f

    • SHA256

      7142ba9a0a96e7184d8da2d5514d4416191494cc709f424f924ceb26332171ec

    • SHA512

      24c1e1b85486b49263ef4fdfc34f68f3b0f78f83da77e9a8fc0f8f27b51beaf25d70c64fd07c10e35a2593d359c742759a63c0ff985eea630c0588af96af49f0

    • SSDEEP

      98304:3qJbc5xtz+kl/m5lifMc/PKkuExnaZ/l+7Y1rtJKCg85:6Jk+y/mnifVKkbaZ/l+7Y1rtECg85

    • Executes dropped EXE

    • Registers COM server for autorun

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks