Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a2634233c62855cbc67bbd269e00fe9d

  • Size

    65KB

  • Sample

    240224-whdtbsaa65

  • MD5

    a2634233c62855cbc67bbd269e00fe9d

  • SHA1

    b5238208924c594bb10111dce2f9fab40158dc24

  • SHA256

    3c70b77b1f530155d8d69c2d13c8f5d44d3dc3e8c203cdd4996898ad3ccf8193

  • SHA512

    9abc2029f90a835c50b1cd54fc733ce77f5e6cee1baea251cd204b00adbd2a19cff45611ca648adbf19b2aef3205412fa24cc6dfa8464aba08c968ce94a61eb8

  • SSDEEP

    768:yAWcdiE5zCt4aVkeqru18JBSTAooVNgIJEs1v61iWlzxVpt0nbKVDuk1wFi:ynoCt4EqTSsJE06DxV8GVDufY

Malware Config

Targets

    • Target

      a2634233c62855cbc67bbd269e00fe9d

    • Size

      65KB

    • MD5

      a2634233c62855cbc67bbd269e00fe9d

    • SHA1

      b5238208924c594bb10111dce2f9fab40158dc24

    • SHA256

      3c70b77b1f530155d8d69c2d13c8f5d44d3dc3e8c203cdd4996898ad3ccf8193

    • SHA512

      9abc2029f90a835c50b1cd54fc733ce77f5e6cee1baea251cd204b00adbd2a19cff45611ca648adbf19b2aef3205412fa24cc6dfa8464aba08c968ce94a61eb8

    • SSDEEP

      768:yAWcdiE5zCt4aVkeqru18JBSTAooVNgIJEs1v61iWlzxVpt0nbKVDuk1wFi:ynoCt4EqTSsJE06DxV8GVDufY

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks