Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eb80c9d327ffd6ede1d2b0558572de31384c0cbbd8520fd3093ffb5266f7fae7

  • Size

    3.7MB

  • Sample

    230317-kfpl9sfb52

  • MD5

    e892ba36a0122b457037ba9cc2fa3c1a

  • SHA1

    f5f134bef0147d7318337624ea5ea9444cb86936

  • SHA256

    eb80c9d327ffd6ede1d2b0558572de31384c0cbbd8520fd3093ffb5266f7fae7

  • SHA512

    660df56602c3c26a1395c653adb86a0cd24739a3256c3015fc90bebefcdb376f40199269d88c176936fd5bc8b89738c1227e269b22a1d45a28a72b0cfaedb161

  • SSDEEP

    49152:ZkFn+eJtmmiww1udq1aKT5V/OQOt5Z9id3Z:

Malware Config

Targets

    • Target

      eb80c9d327ffd6ede1d2b0558572de31384c0cbbd8520fd3093ffb5266f7fae7

    • Size

      3.7MB

    • MD5

      e892ba36a0122b457037ba9cc2fa3c1a

    • SHA1

      f5f134bef0147d7318337624ea5ea9444cb86936

    • SHA256

      eb80c9d327ffd6ede1d2b0558572de31384c0cbbd8520fd3093ffb5266f7fae7

    • SHA512

      660df56602c3c26a1395c653adb86a0cd24739a3256c3015fc90bebefcdb376f40199269d88c176936fd5bc8b89738c1227e269b22a1d45a28a72b0cfaedb161

    • SSDEEP

      49152:ZkFn+eJtmmiww1udq1aKT5V/OQOt5Z9id3Z:

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks