Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    257d2df80cb2ec8363adf2a022d3ccc0a2ca04b0c114e542292ebd8ce8de44e6

  • Size

    695KB

  • Sample

    230422-3m2jhsbb5t

  • MD5

    4d9d733d28de3349dd70af9f0705c2e9

  • SHA1

    621e761f815ff78609becfb3b62d87e8c761ec5d

  • SHA256

    257d2df80cb2ec8363adf2a022d3ccc0a2ca04b0c114e542292ebd8ce8de44e6

  • SHA512

    f86c71a2e4357a7cf49a9465c7b49d022d359db8a1e53324be34e76b33885a2cd81efd195a1367cd4c135de08df4fe092ae69bf77dcbf90a2f4d597be7be775b

  • SSDEEP

    12288:Hy90iBhxGB+g3QWdkOXromsxxECaFKCuYeHcYZxQQJb/iB04GXm:HyHT1W+OsH7ECaXuYQYcuoW

Malware Config

Targets

    • Target

      257d2df80cb2ec8363adf2a022d3ccc0a2ca04b0c114e542292ebd8ce8de44e6

    • Size

      695KB

    • MD5

      4d9d733d28de3349dd70af9f0705c2e9

    • SHA1

      621e761f815ff78609becfb3b62d87e8c761ec5d

    • SHA256

      257d2df80cb2ec8363adf2a022d3ccc0a2ca04b0c114e542292ebd8ce8de44e6

    • SHA512

      f86c71a2e4357a7cf49a9465c7b49d022d359db8a1e53324be34e76b33885a2cd81efd195a1367cd4c135de08df4fe092ae69bf77dcbf90a2f4d597be7be775b

    • SSDEEP

      12288:Hy90iBhxGB+g3QWdkOXromsxxECaFKCuYeHcYZxQQJb/iB04GXm:HyHT1W+OsH7ECaXuYQYcuoW

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks