Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    tmp

  • Size

    832KB

  • Sample

    230323-s4rersgf47

  • MD5

    953f34884877d4946480bb967d355f69

  • SHA1

    e52f1dcdb3936c03649879acfa233950be04b1ac

  • SHA256

    fbf4c7eb349a55d1ff19fa05bf33bbe8c0264177c2d3907c5a97cedc61aa804e

  • SHA512

    a0b57553be2e55ddb07a7c527ddb67a2f080ce00ace7643292d2e4fd328536e64d0c367f95267666c5ab2371342e2bec8d5e6f685ba894351355250492a91a1b

  • SSDEEP

    12288:FVQZwdnG0J27oEawEbRaNYBGutIm9RWNPfgLpttFHo0eZpsctZ+1Rkw4qsr3O:sZGnh/Ecz3Im9wP8tPoPwcC1DaO

Score
7/10

Malware Config

Targets

    • Target

      tmp

    • Size

      832KB

    • MD5

      953f34884877d4946480bb967d355f69

    • SHA1

      e52f1dcdb3936c03649879acfa233950be04b1ac

    • SHA256

      fbf4c7eb349a55d1ff19fa05bf33bbe8c0264177c2d3907c5a97cedc61aa804e

    • SHA512

      a0b57553be2e55ddb07a7c527ddb67a2f080ce00ace7643292d2e4fd328536e64d0c367f95267666c5ab2371342e2bec8d5e6f685ba894351355250492a91a1b

    • SSDEEP

      12288:FVQZwdnG0J27oEawEbRaNYBGutIm9RWNPfgLpttFHo0eZpsctZ+1Rkw4qsr3O:sZGnh/Ecz3Im9wP8tPoPwcC1DaO

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks