Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a276042c366e460fefa4bd8e4c2d736e67f786d97b53f884cda2d8720c912f28

  • Size

    560KB

  • Sample

    230423-fkalpacg31

  • MD5

    d669937a4454ced06289105c6231d6e6

  • SHA1

    876c340277fb93cf557664745ef284ff367a9ba3

  • SHA256

    a276042c366e460fefa4bd8e4c2d736e67f786d97b53f884cda2d8720c912f28

  • SHA512

    61fae08eb3818a43b4c0bbcad95ecb4ae73fd4cd7045fb4c6e529aa106f59e305c4b259a02b93ac6d8f12e7b1852e6d93251454173c19c8f2a7b9a4ad10054f3

  • SSDEEP

    12288:uy90SBp26V/EhitCj6bxmsph66nFTB1B+udVJxxQnjGH:uytBxEsMj6bxRBPwm+njGH

Malware Config

Targets

    • Target

      a276042c366e460fefa4bd8e4c2d736e67f786d97b53f884cda2d8720c912f28

    • Size

      560KB

    • MD5

      d669937a4454ced06289105c6231d6e6

    • SHA1

      876c340277fb93cf557664745ef284ff367a9ba3

    • SHA256

      a276042c366e460fefa4bd8e4c2d736e67f786d97b53f884cda2d8720c912f28

    • SHA512

      61fae08eb3818a43b4c0bbcad95ecb4ae73fd4cd7045fb4c6e529aa106f59e305c4b259a02b93ac6d8f12e7b1852e6d93251454173c19c8f2a7b9a4ad10054f3

    • SSDEEP

      12288:uy90SBp26V/EhitCj6bxmsph66nFTB1B+udVJxxQnjGH:uytBxEsMj6bxRBPwm+njGH

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks