Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0a15cb345ff9c3b6166e3139e2522b93_JC.exe

  • Size

    896KB

  • Sample

    231012-nygwxsad83

  • MD5

    0a15cb345ff9c3b6166e3139e2522b93

  • SHA1

    3cc8c220c33352ec5dbe5f067f9e8ca94d30adf7

  • SHA256

    e143b7d574448259a7460817662e75e5f17c4686462b3f5b7422c82486f53abd

  • SHA512

    5db7d77117bdee841f3bb8220907157f70394e60bd71706d3d7fcfb4d2d1ba1cc3158a01f5b9d862ed04947610c173ffdd7c3d0f595ef0870ae289b89519a0f4

  • SSDEEP

    24576:ZRkkvPYlaAD2E3Qi0hAPlFtweDp4in8GgEdunxLW0E:ZRk0PMaMJQiSAt0eDp4i8GnQxLPE

Malware Config

Targets

    • Target

      0a15cb345ff9c3b6166e3139e2522b93_JC.exe

    • Size

      896KB

    • MD5

      0a15cb345ff9c3b6166e3139e2522b93

    • SHA1

      3cc8c220c33352ec5dbe5f067f9e8ca94d30adf7

    • SHA256

      e143b7d574448259a7460817662e75e5f17c4686462b3f5b7422c82486f53abd

    • SHA512

      5db7d77117bdee841f3bb8220907157f70394e60bd71706d3d7fcfb4d2d1ba1cc3158a01f5b9d862ed04947610c173ffdd7c3d0f595ef0870ae289b89519a0f4

    • SSDEEP

      24576:ZRkkvPYlaAD2E3Qi0hAPlFtweDp4in8GgEdunxLW0E:ZRk0PMaMJQiSAt0eDp4i8GnQxLPE

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks