Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7857165f63accd02acec23eb20b9d318971a02486d5cfe4013b9345d3ebcea9c

  • Size

    568KB

  • Sample

    230422-mqhmtaed45

  • MD5

    ada1e886604608d18d18714f5b2d5ab5

  • SHA1

    5e30e1bf3a484d05efb57d0f5c966083ddcba255

  • SHA256

    7857165f63accd02acec23eb20b9d318971a02486d5cfe4013b9345d3ebcea9c

  • SHA512

    bafa1df051550fb1967a51708f31618da7d0a11afda937add9e3484580f296ba62ac2bdf4ede6c2ea3961267f4acae55e460b8e4dc309a5d23b92de9e42cbad9

  • SSDEEP

    12288:Ey90LiV4zNr2VmxhkBKedxE9JVOtXa6/Ww8l7xPciB75eACY:EyF4zFW+k0AEPEVeDBHD

Malware Config

Targets

    • Target

      7857165f63accd02acec23eb20b9d318971a02486d5cfe4013b9345d3ebcea9c

    • Size

      568KB

    • MD5

      ada1e886604608d18d18714f5b2d5ab5

    • SHA1

      5e30e1bf3a484d05efb57d0f5c966083ddcba255

    • SHA256

      7857165f63accd02acec23eb20b9d318971a02486d5cfe4013b9345d3ebcea9c

    • SHA512

      bafa1df051550fb1967a51708f31618da7d0a11afda937add9e3484580f296ba62ac2bdf4ede6c2ea3961267f4acae55e460b8e4dc309a5d23b92de9e42cbad9

    • SSDEEP

      12288:Ey90LiV4zNr2VmxhkBKedxE9JVOtXa6/Ww8l7xPciB75eACY:EyF4zFW+k0AEPEVeDBHD

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks