Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b75a74323b1d72453d486e0096950183

  • Size

    2.6MB

  • Sample

    240306-n7xzhaac6z

  • MD5

    b75a74323b1d72453d486e0096950183

  • SHA1

    a5faa799517c69f986a0d5627f8e0d0d9602047f

  • SHA256

    767cf7c577babf8b576010eddd229f04066139b3cf1b8bbe7674aebacf4de34b

  • SHA512

    1bc38ef5598de57bd56be0987684d12a0060a3b5ed3579f47537827f3772fd4f080929fcb5196a1dc756d7b4cc5f5fff4b09a1114e902c318e456d3601759ac2

  • SSDEEP

    49152:fYPYPrRokpyftlj4oJdXN0BMOwLloBrugt:7rRokc7JdXN0B7+s7

Malware Config

Targets

    • Target

      b75a74323b1d72453d486e0096950183

    • Size

      2.6MB

    • MD5

      b75a74323b1d72453d486e0096950183

    • SHA1

      a5faa799517c69f986a0d5627f8e0d0d9602047f

    • SHA256

      767cf7c577babf8b576010eddd229f04066139b3cf1b8bbe7674aebacf4de34b

    • SHA512

      1bc38ef5598de57bd56be0987684d12a0060a3b5ed3579f47537827f3772fd4f080929fcb5196a1dc756d7b4cc5f5fff4b09a1114e902c318e456d3601759ac2

    • SSDEEP

      49152:fYPYPrRokpyftlj4oJdXN0BMOwLloBrugt:7rRokc7JdXN0B7+s7

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks