Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b238f156738748f49b4cc906fa3481b7

  • Size

    3.9MB

  • Sample

    240304-qlacesbb7s

  • MD5

    b238f156738748f49b4cc906fa3481b7

  • SHA1

    a94aa076ac10d5eb33178c40e7f6975aa0d9a2a9

  • SHA256

    a4fad304b24d1f0db6ce98abcd6a26dee76f59ab3b4f50a6981e8a7d9332f964

  • SHA512

    59db0d0dcf4bcd590d346d7b0910d767de907b717906cf6096cd3a0b02927a1cf01b7c5a03e23baa97167861dfbda04ce42faca2f64f8bc9a121c9dbc2b97299

  • SSDEEP

    49152:eu5HOTeWWqs8LIWfX5DZDmNQCfz46/ivNakOElMaFLkbv9M3hKPgssSt2g:dHxWvsgzhNDm+6/0ak7Y94hv7St

Malware Config

Targets

    • Target

      b238f156738748f49b4cc906fa3481b7

    • Size

      3.9MB

    • MD5

      b238f156738748f49b4cc906fa3481b7

    • SHA1

      a94aa076ac10d5eb33178c40e7f6975aa0d9a2a9

    • SHA256

      a4fad304b24d1f0db6ce98abcd6a26dee76f59ab3b4f50a6981e8a7d9332f964

    • SHA512

      59db0d0dcf4bcd590d346d7b0910d767de907b717906cf6096cd3a0b02927a1cf01b7c5a03e23baa97167861dfbda04ce42faca2f64f8bc9a121c9dbc2b97299

    • SSDEEP

      49152:eu5HOTeWWqs8LIWfX5DZDmNQCfz46/ivNakOElMaFLkbv9M3hKPgssSt2g:dHxWvsgzhNDm+6/0ak7Y94hv7St

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks