Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    45f15425b43fba2cef1e7424c3a83198f330709fb8a644302de69219df6b8a8e

  • Size

    828KB

  • Sample

    230419-qpm3pace9z

  • MD5

    7c939b3c38052bcc4f43793e00078f32

  • SHA1

    a9876566ff5f649ca835f55daa4a7a9553e70c70

  • SHA256

    45f15425b43fba2cef1e7424c3a83198f330709fb8a644302de69219df6b8a8e

  • SHA512

    5eca80a8204f4750576bd65c24e7f7fbecea619a5af8f6ce16cf74937d528afd3f55df967e9bf83c126965fc3238444ca2d3a1a687e325932c12da4ecaf8a5df

  • SSDEEP

    12288:Xy90J2VwiFT4bUnrJkD9C0Le6pCJGJWpux2fZSPKsc+ZIjbLeDG++:XygS2gB0Le6pqFfYPKsc+Zoqa

Malware Config

Targets

    • Target

      45f15425b43fba2cef1e7424c3a83198f330709fb8a644302de69219df6b8a8e

    • Size

      828KB

    • MD5

      7c939b3c38052bcc4f43793e00078f32

    • SHA1

      a9876566ff5f649ca835f55daa4a7a9553e70c70

    • SHA256

      45f15425b43fba2cef1e7424c3a83198f330709fb8a644302de69219df6b8a8e

    • SHA512

      5eca80a8204f4750576bd65c24e7f7fbecea619a5af8f6ce16cf74937d528afd3f55df967e9bf83c126965fc3238444ca2d3a1a687e325932c12da4ecaf8a5df

    • SSDEEP

      12288:Xy90J2VwiFT4bUnrJkD9C0Le6pCJGJWpux2fZSPKsc+ZIjbLeDG++:XygS2gB0Le6pqFfYPKsc+Zoqa

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks