Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    107eb97721a9e794b2165807154213b02a59309b6dd152062b9ade493f7878fb

  • Size

    690KB

  • Sample

    230426-x8swlsdc7w

  • MD5

    86244b0c111c78e78003db951b64660e

  • SHA1

    03290f5cd8e47d877c684e9434e7a2dd66e0055a

  • SHA256

    107eb97721a9e794b2165807154213b02a59309b6dd152062b9ade493f7878fb

  • SHA512

    f2def6b542a2deec5f2b2d0627d86f1bf75ac0a4d883b21e841a7da6caba715bcaa129f77bd60d5961f49644116f8021a7c8f06d98d0dc90b95ef0a448ac5d5f

  • SSDEEP

    12288:gy90qublJjrM90ejI2NepAcYagnGeghG1niNtm7bODhet+:gyIHrA+HYagnGeSNMON8+

Malware Config

Targets

    • Target

      107eb97721a9e794b2165807154213b02a59309b6dd152062b9ade493f7878fb

    • Size

      690KB

    • MD5

      86244b0c111c78e78003db951b64660e

    • SHA1

      03290f5cd8e47d877c684e9434e7a2dd66e0055a

    • SHA256

      107eb97721a9e794b2165807154213b02a59309b6dd152062b9ade493f7878fb

    • SHA512

      f2def6b542a2deec5f2b2d0627d86f1bf75ac0a4d883b21e841a7da6caba715bcaa129f77bd60d5961f49644116f8021a7c8f06d98d0dc90b95ef0a448ac5d5f

    • SSDEEP

      12288:gy90qublJjrM90ejI2NepAcYagnGeghG1niNtm7bODhet+:gyIHrA+HYagnGeSNMON8+

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks