Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    976a4bd4a796acaf24af355172429913d90acce4939154bbe469dc3a4b699e41

  • Size

    1.2MB

  • Sample

    230423-j83h6adg9t

  • MD5

    eaa9011e139bacc4e116c05ebbe66a7f

  • SHA1

    a4f13d693d0f1c51b7b83dfa74d06a78e50f6c25

  • SHA256

    976a4bd4a796acaf24af355172429913d90acce4939154bbe469dc3a4b699e41

  • SHA512

    564a9fa0958c825d6aaed25eb2178b766b8cb56c985864e8468f1218217ffdcba3f9eb6154e6bfb1cbe94a19f05cb5d97e35084aa67d630c670d730b408c4a65

  • SSDEEP

    24576:mnrLY/rw/fdjqac5YMWaSOhInqc6NkbKOz5+Zn3D6n73:LrwNqac5YMWaS2nkbh9+Zn3DU

Malware Config

Targets

    • Target

      976a4bd4a796acaf24af355172429913d90acce4939154bbe469dc3a4b699e41

    • Size

      1.2MB

    • MD5

      eaa9011e139bacc4e116c05ebbe66a7f

    • SHA1

      a4f13d693d0f1c51b7b83dfa74d06a78e50f6c25

    • SHA256

      976a4bd4a796acaf24af355172429913d90acce4939154bbe469dc3a4b699e41

    • SHA512

      564a9fa0958c825d6aaed25eb2178b766b8cb56c985864e8468f1218217ffdcba3f9eb6154e6bfb1cbe94a19f05cb5d97e35084aa67d630c670d730b408c4a65

    • SSDEEP

      24576:mnrLY/rw/fdjqac5YMWaSOhInqc6NkbKOz5+Zn3D6n73:LrwNqac5YMWaS2nkbh9+Zn3DU

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks