Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b5d79415952acd805bda802de67f286b8d116ede409cb0450b3a7a0fa3709501

  • Size

    765KB

  • Sample

    230212-faqj6aeg9v

  • MD5

    27a53256e9465a2e6e705abeefd49168

  • SHA1

    7ada2c19fb5bc557f46a2fcdc469f146e20928bb

  • SHA256

    b5d79415952acd805bda802de67f286b8d116ede409cb0450b3a7a0fa3709501

  • SHA512

    76c51a440ba93b527f99fa6b06288904c1cd2f16f7edaedfd2fcd8e5905a5a2d46ebb35e38d3f3934184030d0bc0d85cd57189bcc01248312821fcc1303c62e3

  • SSDEEP

    12288:VMrIy9070p65r+taVOh9IQL8pP0WVQH5h7L5m1IT4oybn+Zv8THkhNMy:FymN5SDh9VQpciQnP5LAbn2vyFy

Malware Config

Targets

    • Target

      b5d79415952acd805bda802de67f286b8d116ede409cb0450b3a7a0fa3709501

    • Size

      765KB

    • MD5

      27a53256e9465a2e6e705abeefd49168

    • SHA1

      7ada2c19fb5bc557f46a2fcdc469f146e20928bb

    • SHA256

      b5d79415952acd805bda802de67f286b8d116ede409cb0450b3a7a0fa3709501

    • SHA512

      76c51a440ba93b527f99fa6b06288904c1cd2f16f7edaedfd2fcd8e5905a5a2d46ebb35e38d3f3934184030d0bc0d85cd57189bcc01248312821fcc1303c62e3

    • SSDEEP

      12288:VMrIy9070p65r+taVOh9IQL8pP0WVQH5h7L5m1IT4oybn+Zv8THkhNMy:FymN5SDh9VQpciQnP5LAbn2vyFy

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks