Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    aa052c2b8462eb327a55b820fbe5d1b6

  • Size

    6.5MB

  • Sample

    240227-yk2dhsaa36

  • MD5

    aa052c2b8462eb327a55b820fbe5d1b6

  • SHA1

    a57ae13239424bb1a5e201363b3cd832951a69ba

  • SHA256

    f1b2fd2f89672413bba5dd5c96cf3d08b5a278752654f2486e94f85f8e895a7e

  • SHA512

    0099b3074554a190c512cba38ada1a900d15d3fe0a8aa0b807a74b1d5da6f7efc2fb10c3771cb158a8271f6c007a5b6951594f975923427f40b942f6c6c9628c

  • SSDEEP

    196608:2RPmCsXDjDyf6L2WliXYrHW13fZ4yxZW:2PmCEDVL2ciIrHWhf+W

Malware Config

Targets

    • Target

      aa052c2b8462eb327a55b820fbe5d1b6

    • Size

      6.5MB

    • MD5

      aa052c2b8462eb327a55b820fbe5d1b6

    • SHA1

      a57ae13239424bb1a5e201363b3cd832951a69ba

    • SHA256

      f1b2fd2f89672413bba5dd5c96cf3d08b5a278752654f2486e94f85f8e895a7e

    • SHA512

      0099b3074554a190c512cba38ada1a900d15d3fe0a8aa0b807a74b1d5da6f7efc2fb10c3771cb158a8271f6c007a5b6951594f975923427f40b942f6c6c9628c

    • SSDEEP

      196608:2RPmCsXDjDyf6L2WliXYrHW13fZ4yxZW:2PmCEDVL2ciIrHWhf+W

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks