Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5832efb232bae2eab5cc20173ccc87dd

  • Size

    46KB

  • Sample

    240113-g4aapsdecm

  • MD5

    5832efb232bae2eab5cc20173ccc87dd

  • SHA1

    fff2b9e0a82bcde6973c8484b452710050d08e75

  • SHA256

    1cbc7acacc98c1a212fb493785b1e5094f39e35349015faa59cae9eb1542d59f

  • SHA512

    b22bc04cc847e58063ebb0bbc84186853d6ee2dca765b06342d10e9f14973b01ef121e1a66573b2e0cb40377fc924958f2112a609c051ac15ffb2a90b304ed5b

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFwyRZ2kxPkd3kNNvJQYW:SKcR4mjD9r823Fcakd3WNvJo

Malware Config

Targets

    • Target

      5832efb232bae2eab5cc20173ccc87dd

    • Size

      46KB

    • MD5

      5832efb232bae2eab5cc20173ccc87dd

    • SHA1

      fff2b9e0a82bcde6973c8484b452710050d08e75

    • SHA256

      1cbc7acacc98c1a212fb493785b1e5094f39e35349015faa59cae9eb1542d59f

    • SHA512

      b22bc04cc847e58063ebb0bbc84186853d6ee2dca765b06342d10e9f14973b01ef121e1a66573b2e0cb40377fc924958f2112a609c051ac15ffb2a90b304ed5b

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFwyRZ2kxPkd3kNNvJQYW:SKcR4mjD9r823Fcakd3WNvJo

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks