Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b9f831693fc6fb65eb0eb23278f2c8f7

  • Size

    2.1MB

  • Sample

    240307-3slegshe79

  • MD5

    b9f831693fc6fb65eb0eb23278f2c8f7

  • SHA1

    4f4f0fa6e66a4c007d6d659f776c3c69978c1d37

  • SHA256

    79f4f0ee684cd9effc344b0222ba84eac1f5ffb64709e3bbccff9c666908cccd

  • SHA512

    2e150487a3292d4a7c53dbf1534d793f2d69c32e2b54e9b3f223368ca75b2577cd296e957a99a3b86f06a276ed97a9ade586d13b204fa46bb4022569e04edfe5

  • SSDEEP

    49152:ZxE2Mfc8xmN3Aek03noj45wlDTKqnstLet3Lyo:TbeUJF3noxDeqnstLE7

Malware Config

Targets

    • Target

      b9f831693fc6fb65eb0eb23278f2c8f7

    • Size

      2.1MB

    • MD5

      b9f831693fc6fb65eb0eb23278f2c8f7

    • SHA1

      4f4f0fa6e66a4c007d6d659f776c3c69978c1d37

    • SHA256

      79f4f0ee684cd9effc344b0222ba84eac1f5ffb64709e3bbccff9c666908cccd

    • SHA512

      2e150487a3292d4a7c53dbf1534d793f2d69c32e2b54e9b3f223368ca75b2577cd296e957a99a3b86f06a276ed97a9ade586d13b204fa46bb4022569e04edfe5

    • SSDEEP

      49152:ZxE2Mfc8xmN3Aek03noj45wlDTKqnstLet3Lyo:TbeUJF3noxDeqnstLE7

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks