Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7c7b69e870d8336f959ef81ea64dfc7a9f0fc1179616f4ac9dbb16a67f176e4a

  • Size

    562KB

  • Sample

    230424-efc1ksbc3s

  • MD5

    d41bf48e95af0cbd8c1b920151d9c6ed

  • SHA1

    25e94a78af18f433740af49fa67630422ec53206

  • SHA256

    7c7b69e870d8336f959ef81ea64dfc7a9f0fc1179616f4ac9dbb16a67f176e4a

  • SHA512

    738fcd0ab5831d552362a90f776a71b3bdb35087089836167790584b23dee238924b715b62a42562edd390a4f880d02666355ed493241f2f7a52089bbd502ee7

  • SSDEEP

    12288:1y90Q/4w7ZT3gE8jNvo69ID7I7LtP/wM1D:1y341EeNQ66g7xX3

Malware Config

Targets

    • Target

      7c7b69e870d8336f959ef81ea64dfc7a9f0fc1179616f4ac9dbb16a67f176e4a

    • Size

      562KB

    • MD5

      d41bf48e95af0cbd8c1b920151d9c6ed

    • SHA1

      25e94a78af18f433740af49fa67630422ec53206

    • SHA256

      7c7b69e870d8336f959ef81ea64dfc7a9f0fc1179616f4ac9dbb16a67f176e4a

    • SHA512

      738fcd0ab5831d552362a90f776a71b3bdb35087089836167790584b23dee238924b715b62a42562edd390a4f880d02666355ed493241f2f7a52089bbd502ee7

    • SSDEEP

      12288:1y90Q/4w7ZT3gE8jNvo69ID7I7LtP/wM1D:1y341EeNQ66g7xX3

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks