Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1f7e25ae8fdfa1042f68a476fe2f0846825e6d760a3415b449ec1885655f6f11

  • Size

    480KB

  • Sample

    230505-swhgwsbc43

  • MD5

    8e163881a9f2d4e97c6364e9daf5ee69

  • SHA1

    37c322a5003fb65e0e2b4d5fbe488972a32d6f3d

  • SHA256

    1f7e25ae8fdfa1042f68a476fe2f0846825e6d760a3415b449ec1885655f6f11

  • SHA512

    7a6eff35b8a0a28f8ef2564dfd686168bf0d1602a4b9e4304f18957fd12619434a96408bcd9e2f7d6b4a60064a452718303971ad46d955d984742ccfa2a907cd

  • SSDEEP

    12288:/MrYy90pIkV5BDCP+fCUVw7l5W2xWnsJwsiReKd:Tys/SiC/LTwsu

Malware Config

Targets

    • Target

      1f7e25ae8fdfa1042f68a476fe2f0846825e6d760a3415b449ec1885655f6f11

    • Size

      480KB

    • MD5

      8e163881a9f2d4e97c6364e9daf5ee69

    • SHA1

      37c322a5003fb65e0e2b4d5fbe488972a32d6f3d

    • SHA256

      1f7e25ae8fdfa1042f68a476fe2f0846825e6d760a3415b449ec1885655f6f11

    • SHA512

      7a6eff35b8a0a28f8ef2564dfd686168bf0d1602a4b9e4304f18957fd12619434a96408bcd9e2f7d6b4a60064a452718303971ad46d955d984742ccfa2a907cd

    • SSDEEP

      12288:/MrYy90pIkV5BDCP+fCUVw7l5W2xWnsJwsiReKd:Tys/SiC/LTwsu

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks