Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d678f0222ff6af73a3a94849a52b0c3d23fdbfd76a5adc6b1d84567e6231a6fe

  • Size

    1.2MB

  • Sample

    230424-znc1rsgc5v

  • MD5

    917d0df54006f74a4f7be8aaf72439fb

  • SHA1

    c6c495aacc5e99b561dd85d49f5a6d5c322fc9eb

  • SHA256

    d678f0222ff6af73a3a94849a52b0c3d23fdbfd76a5adc6b1d84567e6231a6fe

  • SHA512

    8951c6509b518fde3dfdab5c6060c0857214bf5b6cda552e26f582989a42c3005f86c235711c9e28a6765569106e3ab7b8bd12055706a659f467f217d1a865dd

  • SSDEEP

    24576:Dc9RstFRHwzmMZlFXCTYaOo2QduHmp8tagFhXskm:DcQrSmdcpOdp/gX

Malware Config

Targets

    • Target

      d678f0222ff6af73a3a94849a52b0c3d23fdbfd76a5adc6b1d84567e6231a6fe

    • Size

      1.2MB

    • MD5

      917d0df54006f74a4f7be8aaf72439fb

    • SHA1

      c6c495aacc5e99b561dd85d49f5a6d5c322fc9eb

    • SHA256

      d678f0222ff6af73a3a94849a52b0c3d23fdbfd76a5adc6b1d84567e6231a6fe

    • SHA512

      8951c6509b518fde3dfdab5c6060c0857214bf5b6cda552e26f582989a42c3005f86c235711c9e28a6765569106e3ab7b8bd12055706a659f467f217d1a865dd

    • SSDEEP

      24576:Dc9RstFRHwzmMZlFXCTYaOo2QduHmp8tagFhXskm:DcQrSmdcpOdp/gX

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks