Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    456ea638ed2ed1db9b28d2c8fe065110

  • Size

    211KB

  • Sample

    240106-getytahfgr

  • MD5

    456ea638ed2ed1db9b28d2c8fe065110

  • SHA1

    2867283513d3bac76714ab82d68e46c8eb2ba93b

  • SHA256

    54abce6cc65fa1293bffa51723e1507fc402faf450bc01727a304733260f710f

  • SHA512

    79de229ac3976e20e57eeac5de87eee0d497d75b9f5b29615ffdef38c0d6242cf1a47036f9b14adf2d2e109cd5cdea77cad99ccdd2eb3b450130b1561005028d

  • SSDEEP

    3072:bjr87S7Gnzbo6KcWmjRrz3gJM9froYEjBCDwiU7epnEKN8MaAOzk+3831tw:AZvMGLoZjBCciU7eppufA0k+38Lw

Malware Config

Targets

    • Target

      456ea638ed2ed1db9b28d2c8fe065110

    • Size

      211KB

    • MD5

      456ea638ed2ed1db9b28d2c8fe065110

    • SHA1

      2867283513d3bac76714ab82d68e46c8eb2ba93b

    • SHA256

      54abce6cc65fa1293bffa51723e1507fc402faf450bc01727a304733260f710f

    • SHA512

      79de229ac3976e20e57eeac5de87eee0d497d75b9f5b29615ffdef38c0d6242cf1a47036f9b14adf2d2e109cd5cdea77cad99ccdd2eb3b450130b1561005028d

    • SSDEEP

      3072:bjr87S7Gnzbo6KcWmjRrz3gJM9froYEjBCDwiU7epnEKN8MaAOzk+3831tw:AZvMGLoZjBCciU7eppufA0k+38Lw

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks