Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5a57402773f7b2055c8528a44894c14e

  • Size

    55KB

  • Sample

    240114-fkynhscdgl

  • MD5

    5a57402773f7b2055c8528a44894c14e

  • SHA1

    80f5bde91700267f9beeecf363ba59beaca1a9f2

  • SHA256

    bbc321e6eba149ec4103ac32b7ffcb1f6297f9f35c001149c75d033f4444e257

  • SHA512

    4dea98469880285b3584d2997d37655518f0084a8db7283eefa81be36e84bb686aa76f371f3b0546118c8ba36bc85e84e8c1d6dcdaf2f027cdea87b26dd0ff6c

  • SSDEEP

    1536:NQ56/eLLlTV/mGLfK+P/Rrh0anLF4vqUtrq+CbVj/kI7voN3NVNFcRbsENDYEQ2Q:NsDFS4VJ5q0G

Malware Config

Targets

    • Target

      5a57402773f7b2055c8528a44894c14e

    • Size

      55KB

    • MD5

      5a57402773f7b2055c8528a44894c14e

    • SHA1

      80f5bde91700267f9beeecf363ba59beaca1a9f2

    • SHA256

      bbc321e6eba149ec4103ac32b7ffcb1f6297f9f35c001149c75d033f4444e257

    • SHA512

      4dea98469880285b3584d2997d37655518f0084a8db7283eefa81be36e84bb686aa76f371f3b0546118c8ba36bc85e84e8c1d6dcdaf2f027cdea87b26dd0ff6c

    • SSDEEP

      1536:NQ56/eLLlTV/mGLfK+P/Rrh0anLF4vqUtrq+CbVj/kI7voN3NVNFcRbsENDYEQ2Q:NsDFS4VJ5q0G

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks