Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fe5228ce5da021d1fc6b945bee19a1e2ce7c29398343803565ba79270f960d0d

  • Size

    642KB

  • Sample

    231030-eynvssag7t

  • MD5

    db31ae1acb423edbc1de8907dcfb4a61

  • SHA1

    ca8a96da0f1c7f45922192c17e183751edd5a725

  • SHA256

    fe5228ce5da021d1fc6b945bee19a1e2ce7c29398343803565ba79270f960d0d

  • SHA512

    bae4395fa5a231b865e5fd2167006f35a94482f125a912dc5a7afd7cd3335f270324d07aeec53ab7687374f35e759966455d37d45d5834100887b3e96483d064

  • SSDEEP

    12288:JHQ4R78rGcukgmWRjAeQiqtoCldl4Dol9:1HhZcw95jtCloDg9

Malware Config

Targets

    • Target

      fe5228ce5da021d1fc6b945bee19a1e2ce7c29398343803565ba79270f960d0d

    • Size

      642KB

    • MD5

      db31ae1acb423edbc1de8907dcfb4a61

    • SHA1

      ca8a96da0f1c7f45922192c17e183751edd5a725

    • SHA256

      fe5228ce5da021d1fc6b945bee19a1e2ce7c29398343803565ba79270f960d0d

    • SHA512

      bae4395fa5a231b865e5fd2167006f35a94482f125a912dc5a7afd7cd3335f270324d07aeec53ab7687374f35e759966455d37d45d5834100887b3e96483d064

    • SSDEEP

      12288:JHQ4R78rGcukgmWRjAeQiqtoCldl4Dol9:1HhZcw95jtCloDg9

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks