Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    19f46a351d659d0c68a0212bfc8f7525.exe

  • Size

    233KB

  • Sample

    230707-kjxr2sfh82

  • MD5

    19f46a351d659d0c68a0212bfc8f7525

  • SHA1

    6eb89564e5c205960ce007e70826c9523e51d2b4

  • SHA256

    c4b6bb4bd33e3ef107781a21eb0dedb82dbe90c4e9d6f0b19620c8940e18fa6b

  • SHA512

    4f3476bfdb8ad4c52d1888ed5bf13d527e9606a866ad7458a53cfc31893a79a3a031828063b7fba42e26d9d2fcbc2f2fc9511adbba4fe184bdb24c910856e199

  • SSDEEP

    3072:Dp7sIZiMU+9sOxhGboIGVMpmAS9HL81RU9GS9nnJWe87L0Iv6KcQtR:DXLUwsOxUoBMDUL4S9nnQ3n0Gjj

Malware Config

Targets

    • Target

      19f46a351d659d0c68a0212bfc8f7525.exe

    • Size

      233KB

    • MD5

      19f46a351d659d0c68a0212bfc8f7525

    • SHA1

      6eb89564e5c205960ce007e70826c9523e51d2b4

    • SHA256

      c4b6bb4bd33e3ef107781a21eb0dedb82dbe90c4e9d6f0b19620c8940e18fa6b

    • SHA512

      4f3476bfdb8ad4c52d1888ed5bf13d527e9606a866ad7458a53cfc31893a79a3a031828063b7fba42e26d9d2fcbc2f2fc9511adbba4fe184bdb24c910856e199

    • SSDEEP

      3072:Dp7sIZiMU+9sOxhGboIGVMpmAS9HL81RU9GS9nnJWe87L0Iv6KcQtR:DXLUwsOxUoBMDUL4S9nnQ3n0Gjj

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks