Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    66ebb78571adee745d593d2d5a36f6c7

  • Size

    36KB

  • Sample

    240119-g5k4lahae9

  • MD5

    66ebb78571adee745d593d2d5a36f6c7

  • SHA1

    250205326cb67342d80f1e52ca87beb61935c0dd

  • SHA256

    d7b59141f885acd7f3eea30a4314e5910a0d89dae7567c5a88a0b397e4754188

  • SHA512

    8b49f3ff2d699983546a9628c32391c7ed81eb9e60dbc381a829bcf5d6010404bd372414a23e6388bf38dd68cd95c539300a9e545580b5c89c1da8f67d0c9b16

  • SSDEEP

    768:/Hp7EnFkWWWWWWWWWWWWWWWoWWWWWWWWWWWWWWWWWWvinhpuN431RNrYmMaPNhRH:/Hp7En7nhpuN43FrYmMaPNhR++86h

Malware Config

Targets

    • Target

      66ebb78571adee745d593d2d5a36f6c7

    • Size

      36KB

    • MD5

      66ebb78571adee745d593d2d5a36f6c7

    • SHA1

      250205326cb67342d80f1e52ca87beb61935c0dd

    • SHA256

      d7b59141f885acd7f3eea30a4314e5910a0d89dae7567c5a88a0b397e4754188

    • SHA512

      8b49f3ff2d699983546a9628c32391c7ed81eb9e60dbc381a829bcf5d6010404bd372414a23e6388bf38dd68cd95c539300a9e545580b5c89c1da8f67d0c9b16

    • SSDEEP

      768:/Hp7EnFkWWWWWWWWWWWWWWWoWWWWWWWWWWWWWWWWWWvinhpuN431RNrYmMaPNhRH:/Hp7En7nhpuN43FrYmMaPNhR++86h

    • Modifies WinLogon for persistence

    • Modifies visibility of file extensions in Explorer

    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks