Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4e328bff8cab61cfaa601d85686ddd0631f8e230cce3126a6c7524ba1f642049_JC.exe

  • Size

    396KB

  • Sample

    230930-pf1rrabf4s

  • MD5

    d3fa902c162d588394a794a4a5ac954e

  • SHA1

    dc247f3651d11af9d32a80d5acae96f5a1e49c59

  • SHA256

    4e328bff8cab61cfaa601d85686ddd0631f8e230cce3126a6c7524ba1f642049

  • SHA512

    81085fdb6bc25de77ce2b752ccb0438aa2473782bc2fd6f0e966a9826c51f2cd42d9928feb7a89c69842e456098f897fa455bffba7ae23f3960313b2e822f331

  • SSDEEP

    6144:3W/F+EOX6PbhCX4Uowi0EUToFnUiO2lRQzODLpDhTH:3W9+EVbXUowi0nUFJrv5DF

Malware Config

Targets

    • Target

      4e328bff8cab61cfaa601d85686ddd0631f8e230cce3126a6c7524ba1f642049_JC.exe

    • Size

      396KB

    • MD5

      d3fa902c162d588394a794a4a5ac954e

    • SHA1

      dc247f3651d11af9d32a80d5acae96f5a1e49c59

    • SHA256

      4e328bff8cab61cfaa601d85686ddd0631f8e230cce3126a6c7524ba1f642049

    • SHA512

      81085fdb6bc25de77ce2b752ccb0438aa2473782bc2fd6f0e966a9826c51f2cd42d9928feb7a89c69842e456098f897fa455bffba7ae23f3960313b2e822f331

    • SSDEEP

      6144:3W/F+EOX6PbhCX4Uowi0EUToFnUiO2lRQzODLpDhTH:3W9+EVbXUowi0nUFJrv5DF

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks