Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e6ecd31765e348344cd650bb2297e527.exe

  • Size

    214KB

  • Sample

    230601-ggwkesdc6z

  • MD5

    e6ecd31765e348344cd650bb2297e527

  • SHA1

    7710b7f29c77c22fec6fa5d95573b210ccefd8b7

  • SHA256

    320392e748f8128753b6c297ac2beedb2e1fd1d0a3fefddbc212b8a13cceb507

  • SHA512

    0560fef2a60d2c0acc1e14e8144d60c264c5ff1413e31b72813c4ceb1f9752292cef035b13c667ec91170d3e8aa1b5070ec9404f6b4849d9e7bae17b4ba7e315

  • SSDEEP

    3072:6RQvwFGNHBtSsa1mwz3lslaScjPwUHTC4vRbv2TcxDAyBSh36yWb7:CzFGkwwTJScjwIb2ESh3

Malware Config

Targets

    • Target

      e6ecd31765e348344cd650bb2297e527.exe

    • Size

      214KB

    • MD5

      e6ecd31765e348344cd650bb2297e527

    • SHA1

      7710b7f29c77c22fec6fa5d95573b210ccefd8b7

    • SHA256

      320392e748f8128753b6c297ac2beedb2e1fd1d0a3fefddbc212b8a13cceb507

    • SHA512

      0560fef2a60d2c0acc1e14e8144d60c264c5ff1413e31b72813c4ceb1f9752292cef035b13c667ec91170d3e8aa1b5070ec9404f6b4849d9e7bae17b4ba7e315

    • SSDEEP

      3072:6RQvwFGNHBtSsa1mwz3lslaScjPwUHTC4vRbv2TcxDAyBSh36yWb7:CzFGkwwTJScjwIb2ESh3

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks