Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a74045f1a7807f1dc7cba0083729dfb7c62f0fe87a66f7582048aeb73ac68f21

  • Size

    707KB

  • Sample

    230425-mltvaabf9x

  • MD5

    76fd8903903c2101389e6143cd3f513c

  • SHA1

    437aafdf7604d1391b66789f0bed69bd9960bcc8

  • SHA256

    a74045f1a7807f1dc7cba0083729dfb7c62f0fe87a66f7582048aeb73ac68f21

  • SHA512

    4ae3a836897b07327cec412cf02260cf75b33d0ae0ff58c3ea55b9e320182cf9c6235aec84d090407fe205ccfcfdab95f376921b8172fdc34ea536a2d6193bc7

  • SSDEEP

    12288:ey90dfOHKaYOSGuLWk7Pnpm34oox937STQn4qmRx/UA+efaJmdl:ey8mqaYOSGcWk7PnuexZ7743lXNdl

Malware Config

Targets

    • Target

      a74045f1a7807f1dc7cba0083729dfb7c62f0fe87a66f7582048aeb73ac68f21

    • Size

      707KB

    • MD5

      76fd8903903c2101389e6143cd3f513c

    • SHA1

      437aafdf7604d1391b66789f0bed69bd9960bcc8

    • SHA256

      a74045f1a7807f1dc7cba0083729dfb7c62f0fe87a66f7582048aeb73ac68f21

    • SHA512

      4ae3a836897b07327cec412cf02260cf75b33d0ae0ff58c3ea55b9e320182cf9c6235aec84d090407fe205ccfcfdab95f376921b8172fdc34ea536a2d6193bc7

    • SSDEEP

      12288:ey90dfOHKaYOSGuLWk7Pnpm34oox937STQn4qmRx/UA+efaJmdl:ey8mqaYOSGcWk7PnuexZ7743lXNdl

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks