Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    42d222cfe08a8e609a71630308920e58

  • Size

    194KB

  • Sample

    240105-fnp6jsbdd9

  • MD5

    42d222cfe08a8e609a71630308920e58

  • SHA1

    764114e089c49036c692a898fbffa02a6b911e8a

  • SHA256

    ddb4a02eb9092efaf14750423a5d1c2b76e34c586ef6499891e1d1875770ce08

  • SHA512

    32c2b6da0d26b1efd534b1b6492854dd44da339d1b27d2604b9f7f1d3c5c519cc3bd8b7d1ee33daa96816e073e8fca613dfcd80a577e10262a8df051bd562a60

  • SSDEEP

    3072:hn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsUUTzwQRvEZ9yu:h1OgDPdkBAFZWjadD4s5TzHELP

Malware Config

Targets

    • Target

      42d222cfe08a8e609a71630308920e58

    • Size

      194KB

    • MD5

      42d222cfe08a8e609a71630308920e58

    • SHA1

      764114e089c49036c692a898fbffa02a6b911e8a

    • SHA256

      ddb4a02eb9092efaf14750423a5d1c2b76e34c586ef6499891e1d1875770ce08

    • SHA512

      32c2b6da0d26b1efd534b1b6492854dd44da339d1b27d2604b9f7f1d3c5c519cc3bd8b7d1ee33daa96816e073e8fca613dfcd80a577e10262a8df051bd562a60

    • SSDEEP

      3072:hn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsUUTzwQRvEZ9yu:h1OgDPdkBAFZWjadD4s5TzHELP

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Enterprise v15

Tasks