Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3584de03dd852643eaa4497a6f76ad44058952b48bcb40d529fd8f5fb3fc5a5b

  • Size

    565KB

  • Sample

    230423-gxstgabe48

  • MD5

    919e601a2b6e210eadca13c2a9b995ee

  • SHA1

    5014f6eb23de2a97d2d93632f9aa1fc1364b5209

  • SHA256

    3584de03dd852643eaa4497a6f76ad44058952b48bcb40d529fd8f5fb3fc5a5b

  • SHA512

    91bdfb7a309fa3688ca9342f2aa5614f4a8a896eec6d26439411a24401379d2f7a2ee53530607df5344317ce334299333ef5996a6ffe352ee20519d7e233de0c

  • SSDEEP

    12288:My90g9mq17ZYDyeDjdKhw5fAI9yzubbEoTdj5+:Myf9mq1Nsvqw5fAI9yzmbEoJj8

Malware Config

Targets

    • Target

      3584de03dd852643eaa4497a6f76ad44058952b48bcb40d529fd8f5fb3fc5a5b

    • Size

      565KB

    • MD5

      919e601a2b6e210eadca13c2a9b995ee

    • SHA1

      5014f6eb23de2a97d2d93632f9aa1fc1364b5209

    • SHA256

      3584de03dd852643eaa4497a6f76ad44058952b48bcb40d529fd8f5fb3fc5a5b

    • SHA512

      91bdfb7a309fa3688ca9342f2aa5614f4a8a896eec6d26439411a24401379d2f7a2ee53530607df5344317ce334299333ef5996a6ffe352ee20519d7e233de0c

    • SSDEEP

      12288:My90g9mq17ZYDyeDjdKhw5fAI9yzubbEoTdj5+:Myf9mq1Nsvqw5fAI9yzmbEoJj8

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks