Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1a2a560e957632f80f8ee2c9dda7d3a0

  • Size

    5.1MB

  • Sample

    231225-ndxfwabhdm

  • MD5

    1a2a560e957632f80f8ee2c9dda7d3a0

  • SHA1

    9e478fa93cfc65a245c3931dbca47f5f985d74f1

  • SHA256

    6c5d271ef639c261074a126ceec0218cbc578229411a273d92647a549d9f4429

  • SHA512

    0e2232bc5f499509f43e1e755492356d98713d0b9cd68c128ca00ac8c15fb4407650ada50b7c5b02f65291c8f79bc1a5297d1c4eca650df61b46aa29f777d51d

  • SSDEEP

    98304:+JJjHr7onSkPKok4M+cSZcRxhToIGTCCfJakPIFzi5PpX:6JjHHo+F4yRRIBxNPIFzkpX

Malware Config

Targets

    • Target

      1a2a560e957632f80f8ee2c9dda7d3a0

    • Size

      5.1MB

    • MD5

      1a2a560e957632f80f8ee2c9dda7d3a0

    • SHA1

      9e478fa93cfc65a245c3931dbca47f5f985d74f1

    • SHA256

      6c5d271ef639c261074a126ceec0218cbc578229411a273d92647a549d9f4429

    • SHA512

      0e2232bc5f499509f43e1e755492356d98713d0b9cd68c128ca00ac8c15fb4407650ada50b7c5b02f65291c8f79bc1a5297d1c4eca650df61b46aa29f777d51d

    • SSDEEP

      98304:+JJjHr7onSkPKok4M+cSZcRxhToIGTCCfJakPIFzi5PpX:6JjHHo+F4yRRIBxNPIFzkpX

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks