Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    02538a6a91b4bbb6054af995ce8dab7c50e79450da1bbca2ae239c5f9ff1572b

  • Size

    706KB

  • Sample

    230423-f38ansbc44

  • MD5

    75dc29b7bc1537145083daa16636089d

  • SHA1

    29e314003354eb8457a47900cd71579f04308774

  • SHA256

    02538a6a91b4bbb6054af995ce8dab7c50e79450da1bbca2ae239c5f9ff1572b

  • SHA512

    4c8e9fb2097b5047a79ce44577dc22800a53bd1e0bcbbc3d513cd8a422ed066934959133120a540d232660e728373c623ee9f461711b88926eb00d422f4afcb6

  • SSDEEP

    12288:3y90hPqwv5flb6KtlIcb5LmfrdZDu1Gw/VpGMcpBv8OFTn1dqu7VJePv5Wnk5MR:3yqPNfjF11GjMIJRw3v6A

Malware Config

Targets

    • Target

      02538a6a91b4bbb6054af995ce8dab7c50e79450da1bbca2ae239c5f9ff1572b

    • Size

      706KB

    • MD5

      75dc29b7bc1537145083daa16636089d

    • SHA1

      29e314003354eb8457a47900cd71579f04308774

    • SHA256

      02538a6a91b4bbb6054af995ce8dab7c50e79450da1bbca2ae239c5f9ff1572b

    • SHA512

      4c8e9fb2097b5047a79ce44577dc22800a53bd1e0bcbbc3d513cd8a422ed066934959133120a540d232660e728373c623ee9f461711b88926eb00d422f4afcb6

    • SSDEEP

      12288:3y90hPqwv5flb6KtlIcb5LmfrdZDu1Gw/VpGMcpBv8OFTn1dqu7VJePv5Wnk5MR:3yqPNfjF11GjMIJRw3v6A

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.