Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    411c38c71d88ac32e0a110d80a68b990

  • Size

    30KB

  • Sample

    240104-rv1fmscfd8

  • MD5

    411c38c71d88ac32e0a110d80a68b990

  • SHA1

    da88f1e49ce9d6e599b9fa5a33731f3262824cbf

  • SHA256

    24c2239c365ab2cea76bb09b4fa5ec65b00c715870490a3e4a9845a3db242b7e

  • SHA512

    c83ec3fa6aad99cec5ce86d66b20577fdcd46f19211f24ef402e7058a83711e79128156ff153f9b6ae1a670f813b0afb1c0e62e40706752e936702ddfa732465

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEF8Iz:SKcR4mjD9r823Fp

Malware Config

Targets

    • Target

      411c38c71d88ac32e0a110d80a68b990

    • Size

      30KB

    • MD5

      411c38c71d88ac32e0a110d80a68b990

    • SHA1

      da88f1e49ce9d6e599b9fa5a33731f3262824cbf

    • SHA256

      24c2239c365ab2cea76bb09b4fa5ec65b00c715870490a3e4a9845a3db242b7e

    • SHA512

      c83ec3fa6aad99cec5ce86d66b20577fdcd46f19211f24ef402e7058a83711e79128156ff153f9b6ae1a670f813b0afb1c0e62e40706752e936702ddfa732465

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEF8Iz:SKcR4mjD9r823Fp

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks