Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    988b3e8680d498528fd0a715d61a5816

  • Size

    99KB

  • Sample

    240213-fpyt3scg91

  • MD5

    988b3e8680d498528fd0a715d61a5816

  • SHA1

    a92013f44773818611502fa53f8d06d5c15ba561

  • SHA256

    a7ba9136308c1b70fed84e38e60cc08dc6965814ff18d83fa13db4dddd05b298

  • SHA512

    2d3d876b8b65c41cd2cd9144e0dc1f9dab3f6c76ee43fcda8f048061c9a7f065f1eb13773fbf67ad30d0217ddb31122554d944e1e04289b3dd83ab921e9bb696

  • SSDEEP

    3072:sr3KcWmjRrzSH5s4M/BtM9r2hOYZpYx6Da:/64exhOYUMDa

Malware Config

Targets

    • Target

      988b3e8680d498528fd0a715d61a5816

    • Size

      99KB

    • MD5

      988b3e8680d498528fd0a715d61a5816

    • SHA1

      a92013f44773818611502fa53f8d06d5c15ba561

    • SHA256

      a7ba9136308c1b70fed84e38e60cc08dc6965814ff18d83fa13db4dddd05b298

    • SHA512

      2d3d876b8b65c41cd2cd9144e0dc1f9dab3f6c76ee43fcda8f048061c9a7f065f1eb13773fbf67ad30d0217ddb31122554d944e1e04289b3dd83ab921e9bb696

    • SSDEEP

      3072:sr3KcWmjRrzSH5s4M/BtM9r2hOYZpYx6Da:/64exhOYUMDa

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks