Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9696c47b5fbd649d00f67a2c1c6f343d

  • Size

    115KB

  • Sample

    240212-h4dhssfd7y

  • MD5

    9696c47b5fbd649d00f67a2c1c6f343d

  • SHA1

    35c334f564a376cd7a92888570ad917eded0a9f3

  • SHA256

    53f0140eed99e14547741c8bc8f088bcbbf7b2b4d00e27b2c0f208558786211d

  • SHA512

    ae40a9192d06f1f0044064d2d894b25ed9ef02b81d7a8f5b0245f94c676151e315669bed2cc986ddf19b299a46e48a281468684db76398a0ec303dc0e4ada680

  • SSDEEP

    3072:XBpEgMr/r4j1BFZVGfMMVp++VEu/l8Z6ub0W6J5++kLCnvMp:Rqwj1zZc0MVrEel8Z6v9J52LJp

Malware Config

Targets

    • Target

      9696c47b5fbd649d00f67a2c1c6f343d

    • Size

      115KB

    • MD5

      9696c47b5fbd649d00f67a2c1c6f343d

    • SHA1

      35c334f564a376cd7a92888570ad917eded0a9f3

    • SHA256

      53f0140eed99e14547741c8bc8f088bcbbf7b2b4d00e27b2c0f208558786211d

    • SHA512

      ae40a9192d06f1f0044064d2d894b25ed9ef02b81d7a8f5b0245f94c676151e315669bed2cc986ddf19b299a46e48a281468684db76398a0ec303dc0e4ada680

    • SSDEEP

      3072:XBpEgMr/r4j1BFZVGfMMVp++VEu/l8Z6ub0W6J5++kLCnvMp:Rqwj1zZc0MVrEel8Z6v9J52LJp

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks