Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2c64d47928d456eba1913a0d1389c7f673449c685f9160158b94674e24b013b4

  • Size

    1.1MB

  • Sample

    230418-ry63laca69

  • MD5

    09c74acfa3120f007de1985be0436bb4

  • SHA1

    362e0a2cca919c63a088b19cd08b4d456f29007f

  • SHA256

    2c64d47928d456eba1913a0d1389c7f673449c685f9160158b94674e24b013b4

  • SHA512

    0b22747174e1caa8c6301458f5b71c46785cd90a0a6f615f535e8c03afef4c62f8fc284dd31a87d58d1285845917ef5142ac4475b134f2cbe94c6cc8d9041dda

  • SSDEEP

    24576:DyfzPgNCEbQZCSOWnWR3GD+9ZmIUMeH7Qj0mt:WfzP6C0QZCknWZk+TmOEQQ

Malware Config

Targets

    • Target

      2c64d47928d456eba1913a0d1389c7f673449c685f9160158b94674e24b013b4

    • Size

      1.1MB

    • MD5

      09c74acfa3120f007de1985be0436bb4

    • SHA1

      362e0a2cca919c63a088b19cd08b4d456f29007f

    • SHA256

      2c64d47928d456eba1913a0d1389c7f673449c685f9160158b94674e24b013b4

    • SHA512

      0b22747174e1caa8c6301458f5b71c46785cd90a0a6f615f535e8c03afef4c62f8fc284dd31a87d58d1285845917ef5142ac4475b134f2cbe94c6cc8d9041dda

    • SSDEEP

      24576:DyfzPgNCEbQZCSOWnWR3GD+9ZmIUMeH7Qj0mt:WfzP6C0QZCknWZk+TmOEQQ

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks