Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    32e115144b2e2d977a7f07e9e26ec91088358e0907cbca1eaf5d4ecb2ab5d804

  • Size

    479KB

  • Sample

    230505-xp91safg53

  • MD5

    bae7a0ee2dfdd0d7498a60b1c064266c

  • SHA1

    d283d3e0014e86c3e48e562626dc2d88328ff0ac

  • SHA256

    32e115144b2e2d977a7f07e9e26ec91088358e0907cbca1eaf5d4ecb2ab5d804

  • SHA512

    40bedd2134a7587561b4cde7eab6188e48bcbca317f62e62ce661a8e0265aba1b9cc0676c8d2eaf57584b2640817dca8997e0729d46a5211110df4311f201528

  • SSDEEP

    12288:aMrny90VeBItbxjPbkzjnkW8oebL/oFFmH/VfSA:NyZBIxxDQzfbHmH9fSA

Malware Config

Targets

    • Target

      32e115144b2e2d977a7f07e9e26ec91088358e0907cbca1eaf5d4ecb2ab5d804

    • Size

      479KB

    • MD5

      bae7a0ee2dfdd0d7498a60b1c064266c

    • SHA1

      d283d3e0014e86c3e48e562626dc2d88328ff0ac

    • SHA256

      32e115144b2e2d977a7f07e9e26ec91088358e0907cbca1eaf5d4ecb2ab5d804

    • SHA512

      40bedd2134a7587561b4cde7eab6188e48bcbca317f62e62ce661a8e0265aba1b9cc0676c8d2eaf57584b2640817dca8997e0729d46a5211110df4311f201528

    • SSDEEP

      12288:aMrny90VeBItbxjPbkzjnkW8oebL/oFFmH/VfSA:NyZBIxxDQzfbHmH9fSA

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks