Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    FreeCAD-0.21.0-WIN-x64-installer-1.exe

  • Size

    491.5MB

  • Sample

    230817-pvtxraba4x

  • MD5

    886f8bdc1b472888e29114a7f69f5108

  • SHA1

    3579656c087f8e25fffec88b63f50b881a1e0056

  • SHA256

    e6a023e2b1aa8b46cb944fdf146c2d6dde46b3955a84cbb15a66d825c933166e

  • SHA512

    96e57f4201fbade5431c20233dbc1a08200d4f65e800d60acb0e09e61021eda79f1c6a3ed1499bb375c16d02d718c8224b769f0aeeb6d7111803a90f5ee5005c

  • SSDEEP

    12582912:I6K+ZY2FuhG6ZVTtYsBwdHTXQy9CtoH3aMaBpEszZheKg0t:I6TZY2Fuc6QXF9Ct83aMaBpEWveKzt

Malware Config

Targets

    • Target

      FreeCAD-0.21.0-WIN-x64-installer-1.exe

    • Size

      491.5MB

    • MD5

      886f8bdc1b472888e29114a7f69f5108

    • SHA1

      3579656c087f8e25fffec88b63f50b881a1e0056

    • SHA256

      e6a023e2b1aa8b46cb944fdf146c2d6dde46b3955a84cbb15a66d825c933166e

    • SHA512

      96e57f4201fbade5431c20233dbc1a08200d4f65e800d60acb0e09e61021eda79f1c6a3ed1499bb375c16d02d718c8224b769f0aeeb6d7111803a90f5ee5005c

    • SSDEEP

      12582912:I6K+ZY2FuhG6ZVTtYsBwdHTXQy9CtoH3aMaBpEszZheKg0t:I6TZY2Fuc6QXF9Ct83aMaBpEWveKzt

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Registers COM server for autorun

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks