Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2c9fc24d6b2c6a8c4b8e4b9ca0cd93b6bcd72d5e41291fea35b9fa144bd197f5

  • Size

    25KB

  • Sample

    231011-lyklpsfd6s

  • MD5

    2ca55b2dfe1e5515e8ae20288e11b8b5

  • SHA1

    e3a22fab668ae0accb2f3ba330771cd4b59ba8b8

  • SHA256

    2c9fc24d6b2c6a8c4b8e4b9ca0cd93b6bcd72d5e41291fea35b9fa144bd197f5

  • SHA512

    9d617d3f6db74a66c34eda75f19725746fbd2cbf155be7a87404ce955006869e0f2f0c6d92d57ad8a332672c18276b5999bd2fc4810b6123e9154d4b52851abb

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvu:8Q3LotOPNSQVwVVxGKEvKHrVu

Malware Config

Targets

    • Target

      2c9fc24d6b2c6a8c4b8e4b9ca0cd93b6bcd72d5e41291fea35b9fa144bd197f5

    • Size

      25KB

    • MD5

      2ca55b2dfe1e5515e8ae20288e11b8b5

    • SHA1

      e3a22fab668ae0accb2f3ba330771cd4b59ba8b8

    • SHA256

      2c9fc24d6b2c6a8c4b8e4b9ca0cd93b6bcd72d5e41291fea35b9fa144bd197f5

    • SHA512

      9d617d3f6db74a66c34eda75f19725746fbd2cbf155be7a87404ce955006869e0f2f0c6d92d57ad8a332672c18276b5999bd2fc4810b6123e9154d4b52851abb

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvu:8Q3LotOPNSQVwVVxGKEvKHrVu

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks