Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    426b18d6ef1280bc4c2d4746c58aa6b4d80ca198ca53d6bc8b5d509067cbb018

  • Size

    2.8MB

  • Sample

    230923-fwbm5ach2s

  • MD5

    256dd5ebd731d0776f4e5cd0dfd61faa

  • SHA1

    3305d0c8749e172c56f8823ca8aff5359484d96c

  • SHA256

    426b18d6ef1280bc4c2d4746c58aa6b4d80ca198ca53d6bc8b5d509067cbb018

  • SHA512

    c9113cee8f6c92a7ddd63e766d0ada9239327a6d635442259174845d5fcf8f0feee6312fe715917c8ca11f14c20e3a1f22d2264f9a14c55d6937abf34a1c2123

  • SSDEEP

    49152:3C6gLKJuMarhVnMFwTH8/giBiBcbk4ZxZ2DqFeVMhuxcPh:3Hd1XdhBiiMa7

Score
7/10

Malware Config

Targets

    • Target

      426b18d6ef1280bc4c2d4746c58aa6b4d80ca198ca53d6bc8b5d509067cbb018

    • Size

      2.8MB

    • MD5

      256dd5ebd731d0776f4e5cd0dfd61faa

    • SHA1

      3305d0c8749e172c56f8823ca8aff5359484d96c

    • SHA256

      426b18d6ef1280bc4c2d4746c58aa6b4d80ca198ca53d6bc8b5d509067cbb018

    • SHA512

      c9113cee8f6c92a7ddd63e766d0ada9239327a6d635442259174845d5fcf8f0feee6312fe715917c8ca11f14c20e3a1f22d2264f9a14c55d6937abf34a1c2123

    • SSDEEP

      49152:3C6gLKJuMarhVnMFwTH8/giBiBcbk4ZxZ2DqFeVMhuxcPh:3Hd1XdhBiiMa7

    Score
    7/10
    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks