Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e6916a446c465844ae6afdeadbca0dfd2b109659ef9e7c43798851d653e79002

  • Size

    936KB

  • Sample

    230420-f8perafh38

  • MD5

    5ba853a212e4b8fac1d0a8464d759772

  • SHA1

    7dc0b1584028b77af60b4743663706892f87085e

  • SHA256

    e6916a446c465844ae6afdeadbca0dfd2b109659ef9e7c43798851d653e79002

  • SHA512

    88d92495574604ba93c728fe14901663f2ac5d84a2325e6aab193f80293bf16410575c2d0b03bd33ac28206e056e6280538141dd493ca9368618eb40a30d57dc

  • SSDEEP

    12288:Zy90hhvSZLZQv2raInUJ38GlTlUrSfqMrwIDXCFShQYfKKF2k6LaHr1LdSH2Hw6L:ZyYwaOeIng33rwsh3Z7+aHZO2Hw6veU

Malware Config

Targets

    • Target

      e6916a446c465844ae6afdeadbca0dfd2b109659ef9e7c43798851d653e79002

    • Size

      936KB

    • MD5

      5ba853a212e4b8fac1d0a8464d759772

    • SHA1

      7dc0b1584028b77af60b4743663706892f87085e

    • SHA256

      e6916a446c465844ae6afdeadbca0dfd2b109659ef9e7c43798851d653e79002

    • SHA512

      88d92495574604ba93c728fe14901663f2ac5d84a2325e6aab193f80293bf16410575c2d0b03bd33ac28206e056e6280538141dd493ca9368618eb40a30d57dc

    • SSDEEP

      12288:Zy90hhvSZLZQv2raInUJ38GlTlUrSfqMrwIDXCFShQYfKKF2k6LaHr1LdSH2Hw6L:ZyYwaOeIng33rwsh3Z7+aHZO2Hw6veU

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks