Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    System.exe

  • Size

    11.4MB

  • Sample

    230801-gff4cadf65

  • MD5

    db43080913c00700c9594c80b9b0136e

  • SHA1

    1995345c37e03c519f04f01f96af44627a6864f4

  • SHA256

    eed8daf124aa2e45b77d2e3ecf36030ab7fb68890d0130ade09cc6e4d83536b5

  • SHA512

    ba215a2323855105f5bd38105258786879e257ccde15c1501327539913521d820d298ed18b852888d1fcf7bb042a00a4d4b98d0f065a7efbd02d39e8e62eab58

  • SSDEEP

    196608:uCT+aj1dsbcUdUnYc0o5Gd7+6YMdBvIoP1HGzyAoxDyEFh/bhEqjFFReyQfDP2tp:uCT+aQbPmYRQK7+NqP1RmUh/7EfDPes

Malware Config

Targets

    • Target

      System.exe

    • Size

      11.4MB

    • MD5

      db43080913c00700c9594c80b9b0136e

    • SHA1

      1995345c37e03c519f04f01f96af44627a6864f4

    • SHA256

      eed8daf124aa2e45b77d2e3ecf36030ab7fb68890d0130ade09cc6e4d83536b5

    • SHA512

      ba215a2323855105f5bd38105258786879e257ccde15c1501327539913521d820d298ed18b852888d1fcf7bb042a00a4d4b98d0f065a7efbd02d39e8e62eab58

    • SSDEEP

      196608:uCT+aj1dsbcUdUnYc0o5Gd7+6YMdBvIoP1HGzyAoxDyEFh/bhEqjFFReyQfDP2tp:uCT+aQbPmYRQK7+NqP1RmUh/7EfDPes

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks