Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fe130c0a9e560f6fcf10e5b265cb1b6b150f26c509966b5b3ba9b09b8cf0794f

  • Size

    828KB

  • Sample

    230419-nf8xpabh8y

  • MD5

    372678b14eddcb8cf2f5a0c3e75a311b

  • SHA1

    d0935ba7798db5dbc48bdca2c9d0d82a7528adcf

  • SHA256

    fe130c0a9e560f6fcf10e5b265cb1b6b150f26c509966b5b3ba9b09b8cf0794f

  • SHA512

    3655851f78950def2718d9504c64691390edad255471ec1db6899719524061c3e49f65c586be25ab5047e8cde3e128c73b687268e87c702e61aeb8327d0b0e1a

  • SSDEEP

    12288:Ty903levChx7/WC4klZxefgb+KvDkEgUKN1pR1oIlDv2FUJo2kmMNWg:TyUlevE/f4klGVKwEo2AkmNg

Malware Config

Targets

    • Target

      fe130c0a9e560f6fcf10e5b265cb1b6b150f26c509966b5b3ba9b09b8cf0794f

    • Size

      828KB

    • MD5

      372678b14eddcb8cf2f5a0c3e75a311b

    • SHA1

      d0935ba7798db5dbc48bdca2c9d0d82a7528adcf

    • SHA256

      fe130c0a9e560f6fcf10e5b265cb1b6b150f26c509966b5b3ba9b09b8cf0794f

    • SHA512

      3655851f78950def2718d9504c64691390edad255471ec1db6899719524061c3e49f65c586be25ab5047e8cde3e128c73b687268e87c702e61aeb8327d0b0e1a

    • SSDEEP

      12288:Ty903levChx7/WC4klZxefgb+KvDkEgUKN1pR1oIlDv2FUJo2kmMNWg:TyUlevE/f4klGVKwEo2AkmNg

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks