Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b2389c329996b9184ad9f6c0c2026f7c

  • Size

    4.0MB

  • Sample

    240304-qkmalabb5z

  • MD5

    b2389c329996b9184ad9f6c0c2026f7c

  • SHA1

    a71dd84b441f3a5406b6f3ae4cb30c9ac425fad3

  • SHA256

    ae1e8e4c7f16c847c3f8e936ce1b3a0a055844ff72eeb06a7130128655224669

  • SHA512

    e228f22d8d90ddd0e4dd4fc3fea0f311759c94445a4c51fea16288b1d3a1754080f421455a3d51a76142f8bdfd6f0f5a7996b425fa72859c5f26d09a0d67f035

  • SSDEEP

    49152:E3iiEIiIZM84p+JJic9IW1dXgfC/MHmg:QwfYic9IW1dXgfC/MHmg

Malware Config

Targets

    • Target

      b2389c329996b9184ad9f6c0c2026f7c

    • Size

      4.0MB

    • MD5

      b2389c329996b9184ad9f6c0c2026f7c

    • SHA1

      a71dd84b441f3a5406b6f3ae4cb30c9ac425fad3

    • SHA256

      ae1e8e4c7f16c847c3f8e936ce1b3a0a055844ff72eeb06a7130128655224669

    • SHA512

      e228f22d8d90ddd0e4dd4fc3fea0f311759c94445a4c51fea16288b1d3a1754080f421455a3d51a76142f8bdfd6f0f5a7996b425fa72859c5f26d09a0d67f035

    • SSDEEP

      49152:E3iiEIiIZM84p+JJic9IW1dXgfC/MHmg:QwfYic9IW1dXgfC/MHmg

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks