Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f7e7f351f032a5debc19258c5bc996fd490c36ae8ceda84b541adf27bc2905a7

  • Size

    1.1MB

  • Sample

    230416-lxjm1sbd6t

  • MD5

    0281301aaa65c3d82eaa19e4927c1aa1

  • SHA1

    c1d9ca6e2c0ea73a3dd895f689edeb86c92ebdc6

  • SHA256

    f7e7f351f032a5debc19258c5bc996fd490c36ae8ceda84b541adf27bc2905a7

  • SHA512

    ff7a27647b403d12691552ebef4b9b9a0a9fd99361862d777b3dbe2954a0b8d1ccf99cf4bc94b147cfce1b82952e5ea39b7030cd7124469b84f2725982900506

  • SSDEEP

    12288:3y90TJZCTklv13hDrxwviawftxXRW3xVTQLvThGfGDtHRo3BmdBpVXdnJ0bYYEFp:3yoCWhNAK5W3CTAf2gm7rxGsN50Xi

Malware Config

Targets

    • Target

      f7e7f351f032a5debc19258c5bc996fd490c36ae8ceda84b541adf27bc2905a7

    • Size

      1.1MB

    • MD5

      0281301aaa65c3d82eaa19e4927c1aa1

    • SHA1

      c1d9ca6e2c0ea73a3dd895f689edeb86c92ebdc6

    • SHA256

      f7e7f351f032a5debc19258c5bc996fd490c36ae8ceda84b541adf27bc2905a7

    • SHA512

      ff7a27647b403d12691552ebef4b9b9a0a9fd99361862d777b3dbe2954a0b8d1ccf99cf4bc94b147cfce1b82952e5ea39b7030cd7124469b84f2725982900506

    • SSDEEP

      12288:3y90TJZCTklv13hDrxwviawftxXRW3xVTQLvThGfGDtHRo3BmdBpVXdnJ0bYYEFp:3yoCWhNAK5W3CTAf2gm7rxGsN50Xi

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Modifies Windows Defender Real-time Protection settings

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.