Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    03d49ce319034726d97db567b9fbdd57.exe

  • Size

    97KB

  • Sample

    240101-yhk9hsgegr

  • MD5

    03d49ce319034726d97db567b9fbdd57

  • SHA1

    0a630339ec179edc35a7e74b231ae6f525b01f0c

  • SHA256

    1b55fb9622ee90e30a271551a554c22902a2e9862b28f5c6e893491be2318c10

  • SHA512

    d0d08f658e3365ffa86c2d2391df7f23175b819a3273d8b9fb1c2953ded2d79394eb97b7f7227f12c3d2fdf0fc0bef0178f75084274ad6295fbd1422d2404724

  • SSDEEP

    3072:Sp7Ho6pzq9OSqC8xp/AKXJ0Lr1Ww1q/BHugcG0c:Sp7JpKOSkaKxwiBHZZ

Malware Config

Targets

    • Target

      03d49ce319034726d97db567b9fbdd57.exe

    • Size

      97KB

    • MD5

      03d49ce319034726d97db567b9fbdd57

    • SHA1

      0a630339ec179edc35a7e74b231ae6f525b01f0c

    • SHA256

      1b55fb9622ee90e30a271551a554c22902a2e9862b28f5c6e893491be2318c10

    • SHA512

      d0d08f658e3365ffa86c2d2391df7f23175b819a3273d8b9fb1c2953ded2d79394eb97b7f7227f12c3d2fdf0fc0bef0178f75084274ad6295fbd1422d2404724

    • SSDEEP

      3072:Sp7Ho6pzq9OSqC8xp/AKXJ0Lr1Ww1q/BHugcG0c:Sp7JpKOSkaKxwiBHZZ

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks