Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a6c3672c91e3fc4f85c47dd9e3ac1eea2c3c2c5a1eac3769cf299709059437ae

  • Size

    964KB

  • Sample

    230420-e52egafe73

  • MD5

    822d5f54ff88c842c1d6d330b95538c4

  • SHA1

    9f23af3acedd64f911ffcf710c07eb86e7376e07

  • SHA256

    a6c3672c91e3fc4f85c47dd9e3ac1eea2c3c2c5a1eac3769cf299709059437ae

  • SHA512

    fa1eeb81b9eacc56c94e1a0ce7766258f54bc8930bec91d7f4f46a41d27f9c3323ed06ac1e7953fbd2d7e02392dc8b50ef3a6038109330aa350296dd646bb4a9

  • SSDEEP

    24576:qyrTVUTsWZ/jfBcl/JotbOm8qHsmPH8R/g:xrTVUTdZ/jJIJmZjPH6

Malware Config

Targets

    • Target

      a6c3672c91e3fc4f85c47dd9e3ac1eea2c3c2c5a1eac3769cf299709059437ae

    • Size

      964KB

    • MD5

      822d5f54ff88c842c1d6d330b95538c4

    • SHA1

      9f23af3acedd64f911ffcf710c07eb86e7376e07

    • SHA256

      a6c3672c91e3fc4f85c47dd9e3ac1eea2c3c2c5a1eac3769cf299709059437ae

    • SHA512

      fa1eeb81b9eacc56c94e1a0ce7766258f54bc8930bec91d7f4f46a41d27f9c3323ed06ac1e7953fbd2d7e02392dc8b50ef3a6038109330aa350296dd646bb4a9

    • SSDEEP

      24576:qyrTVUTsWZ/jfBcl/JotbOm8qHsmPH8R/g:xrTVUTdZ/jJIJmZjPH6

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks