Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    35024ec1080dbea4c5a2eeeb6bb0e2c1425e4c49e83ace7d10d86a5ed63dab14

  • Size

    25KB

  • Sample

    231016-ne3z2sdf81

  • MD5

    86dc6e77c4a38d12103474e68e8d4005

  • SHA1

    907ebb2a6c11427d2c5d6bf43800666d28fb282b

  • SHA256

    35024ec1080dbea4c5a2eeeb6bb0e2c1425e4c49e83ace7d10d86a5ed63dab14

  • SHA512

    af3f9989efa193087cb4eff2d0289198637308667af966b2b1a5bf591763db42ef0fb2241ba58bba9479cac35d6f2af18e4948823bb27d58fa5d2ab38619498c

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvr:8Q3LotOPNSQVwVVxGKEvKHrVr

Malware Config

Targets

    • Target

      35024ec1080dbea4c5a2eeeb6bb0e2c1425e4c49e83ace7d10d86a5ed63dab14

    • Size

      25KB

    • MD5

      86dc6e77c4a38d12103474e68e8d4005

    • SHA1

      907ebb2a6c11427d2c5d6bf43800666d28fb282b

    • SHA256

      35024ec1080dbea4c5a2eeeb6bb0e2c1425e4c49e83ace7d10d86a5ed63dab14

    • SHA512

      af3f9989efa193087cb4eff2d0289198637308667af966b2b1a5bf591763db42ef0fb2241ba58bba9479cac35d6f2af18e4948823bb27d58fa5d2ab38619498c

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvr:8Q3LotOPNSQVwVVxGKEvKHrVr

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks