Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e36f543fa579e2ab29e28f138f17e9de601c7dda684d420a56865848901fce5d

  • Size

    568KB

  • Sample

    230422-ka2dwadg59

  • MD5

    ad3580d2346ae743229f23a925b84efb

  • SHA1

    6b687031ebaaef1466fe3874d2d3a6a75138dcd0

  • SHA256

    e36f543fa579e2ab29e28f138f17e9de601c7dda684d420a56865848901fce5d

  • SHA512

    864113590fe3ddb8478c37ebd08f5c02299f65c7e1279dc81a8086aa488a0afc69efb563539ec38f61a87153c77df43e3c1335ef57cd3a93091ada4bce7e1235

  • SSDEEP

    12288:5y90IVfnic93BTxE9JaOdk06//V8ndfPBFFV86CigEmmzX:5ynni8nEPxMkBF/ki/zX

Malware Config

Targets

    • Target

      e36f543fa579e2ab29e28f138f17e9de601c7dda684d420a56865848901fce5d

    • Size

      568KB

    • MD5

      ad3580d2346ae743229f23a925b84efb

    • SHA1

      6b687031ebaaef1466fe3874d2d3a6a75138dcd0

    • SHA256

      e36f543fa579e2ab29e28f138f17e9de601c7dda684d420a56865848901fce5d

    • SHA512

      864113590fe3ddb8478c37ebd08f5c02299f65c7e1279dc81a8086aa488a0afc69efb563539ec38f61a87153c77df43e3c1335ef57cd3a93091ada4bce7e1235

    • SSDEEP

      12288:5y90IVfnic93BTxE9JaOdk06//V8ndfPBFFV86CigEmmzX:5ynni8nEPxMkBF/ki/zX

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks