Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0fdbef1ed33366ead6025639345f04110a62d6cb38a15cbb52e1cefe377e881c

  • Size

    1.5MB

  • Sample

    230504-vpl8lsfg7v

  • MD5

    752b4e860e38c4e38c88eeefd767c3ce

  • SHA1

    07bf9dc7fc9a9b104740f1298eb0f1652f5b6623

  • SHA256

    0fdbef1ed33366ead6025639345f04110a62d6cb38a15cbb52e1cefe377e881c

  • SHA512

    4243821d86e64f9f95f15de0db75cc587976c957be4c6bab221fa4dd09991e6a0b11697cef083845163115ffb974045fc2051a905fe68fef6cac66ebf4c0989b

  • SSDEEP

    24576:PyttBhTxuASKjTjm/DB1MiiijlWqbUEOWIE6or2uyjUYTiYw7Lkr9eeArpdV:ajBeASKjnQ1PZFoEL6or21FiYw7+Uj

Malware Config

Targets

    • Target

      0fdbef1ed33366ead6025639345f04110a62d6cb38a15cbb52e1cefe377e881c

    • Size

      1.5MB

    • MD5

      752b4e860e38c4e38c88eeefd767c3ce

    • SHA1

      07bf9dc7fc9a9b104740f1298eb0f1652f5b6623

    • SHA256

      0fdbef1ed33366ead6025639345f04110a62d6cb38a15cbb52e1cefe377e881c

    • SHA512

      4243821d86e64f9f95f15de0db75cc587976c957be4c6bab221fa4dd09991e6a0b11697cef083845163115ffb974045fc2051a905fe68fef6cac66ebf4c0989b

    • SSDEEP

      24576:PyttBhTxuASKjTjm/DB1MiiijlWqbUEOWIE6or2uyjUYTiYw7Lkr9eeArpdV:ajBeASKjnQ1PZFoEL6or21FiYw7+Uj

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks