Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b6fadb96222a98a47d26771e4149f8f344290f186a79e7b58270cb7f61577cc4

  • Size

    690KB

  • Sample

    230426-ze9clsde9z

  • MD5

    7a852d49e8b2c954a865cc7e71463a1c

  • SHA1

    73e641823f67c102bf42ffb05ece6c275c3b548f

  • SHA256

    b6fadb96222a98a47d26771e4149f8f344290f186a79e7b58270cb7f61577cc4

  • SHA512

    dcc2f8ed56f46936220dfb81a63aba0de9f99502781c80da3c8699304618827cc8f1cd65020c9ac280f9a7cd543f96af7d92e1c91fd3ce1edc23d910a9f023fd

  • SSDEEP

    12288:7y908axVWxVBkfRk/LCRfz6DkaGiniNjm3JWit8UaA/2:7y4x4jGRwCRL6k3Nqx6

Malware Config

Targets

    • Target

      b6fadb96222a98a47d26771e4149f8f344290f186a79e7b58270cb7f61577cc4

    • Size

      690KB

    • MD5

      7a852d49e8b2c954a865cc7e71463a1c

    • SHA1

      73e641823f67c102bf42ffb05ece6c275c3b548f

    • SHA256

      b6fadb96222a98a47d26771e4149f8f344290f186a79e7b58270cb7f61577cc4

    • SHA512

      dcc2f8ed56f46936220dfb81a63aba0de9f99502781c80da3c8699304618827cc8f1cd65020c9ac280f9a7cd543f96af7d92e1c91fd3ce1edc23d910a9f023fd

    • SSDEEP

      12288:7y908axVWxVBkfRk/LCRfz6DkaGiniNjm3JWit8UaA/2:7y4x4jGRwCRL6k3Nqx6

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks