Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    020814769e5001fb79186beb2a5d7b363742e59386485d32742537c323c23f6f

  • Size

    1.1MB

  • Sample

    230420-w3zxasde8s

  • MD5

    c0245bd4963dcc9e9126a1a32c120ee6

  • SHA1

    a550fe4ea548e806b2dcb835e8a56a39e6f3a98a

  • SHA256

    020814769e5001fb79186beb2a5d7b363742e59386485d32742537c323c23f6f

  • SHA512

    b3bf5b9e71da9cf61820f369b854a9f20fd8c796274c98461eb7f2bd2c02cde468520615572557ff62665e9993291aff3c7a923ec6aaf0d6fe8604e5606393b8

  • SSDEEP

    24576:jy/Gue7ypGdX+c5OUdVPyfb8L7ZvlNVKswfpf77bc:2/Gf7dX+1UH0cMf7P

Malware Config

Targets

    • Target

      020814769e5001fb79186beb2a5d7b363742e59386485d32742537c323c23f6f

    • Size

      1.1MB

    • MD5

      c0245bd4963dcc9e9126a1a32c120ee6

    • SHA1

      a550fe4ea548e806b2dcb835e8a56a39e6f3a98a

    • SHA256

      020814769e5001fb79186beb2a5d7b363742e59386485d32742537c323c23f6f

    • SHA512

      b3bf5b9e71da9cf61820f369b854a9f20fd8c796274c98461eb7f2bd2c02cde468520615572557ff62665e9993291aff3c7a923ec6aaf0d6fe8604e5606393b8

    • SSDEEP

      24576:jy/Gue7ypGdX+c5OUdVPyfb8L7ZvlNVKswfpf77bc:2/Gf7dX+1UH0cMf7P

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks