Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1f6c44eddf20315e210a1d4b72e24550

  • Size

    177KB

  • Sample

    231225-pyt2xsdffk

  • MD5

    1f6c44eddf20315e210a1d4b72e24550

  • SHA1

    2a34c6809bd6297157b46b0c5da36440770a0c23

  • SHA256

    68309c1c7c91847ea800496b17ae3eafe675e2b61870363ee6ed098ab0a0fa58

  • SHA512

    dcb786b5e4036b222b46874489087d8e5fb6142067cf85408f1b7ff344c40bd78fed07e8f41cb1af7f492d46550011652f4ce994b8fbf69a471a661f34b4dfc7

  • SSDEEP

    3072:IvqOONDQKkT0fTObD/w/EohiDBwVWkWoXNm6GEYEDQQ0k1tk1:IfOUK0UVXNm60fAHk

Malware Config

Targets

    • Target

      1f6c44eddf20315e210a1d4b72e24550

    • Size

      177KB

    • MD5

      1f6c44eddf20315e210a1d4b72e24550

    • SHA1

      2a34c6809bd6297157b46b0c5da36440770a0c23

    • SHA256

      68309c1c7c91847ea800496b17ae3eafe675e2b61870363ee6ed098ab0a0fa58

    • SHA512

      dcb786b5e4036b222b46874489087d8e5fb6142067cf85408f1b7ff344c40bd78fed07e8f41cb1af7f492d46550011652f4ce994b8fbf69a471a661f34b4dfc7

    • SSDEEP

      3072:IvqOONDQKkT0fTObD/w/EohiDBwVWkWoXNm6GEYEDQQ0k1tk1:IfOUK0UVXNm60fAHk

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks