Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c4fc33abd8bfcbdc094010f5682b99ec

  • Size

    249KB

  • Sample

    240313-e6te9aef43

  • MD5

    c4fc33abd8bfcbdc094010f5682b99ec

  • SHA1

    7b4b5ed08de7cbd2d7c499fd1e980f2ce0199181

  • SHA256

    27cce5adc271a57236913ea2c2af6bbe15747a3f458f4f45fb33c81d26225220

  • SHA512

    611a7c3568bd452cd14cbc82742712c9f1af467e4e030a8772c46101070f8bb8e77eba1b48ef7aa235d0aedb9f7e7ec36f832e1252ea7669dec7b5fb8f630c81

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5DEya/AOKh0uw1ndSgo5:h1OgLdaOIIOKiJJo

Malware Config

Targets

    • Target

      c4fc33abd8bfcbdc094010f5682b99ec

    • Size

      249KB

    • MD5

      c4fc33abd8bfcbdc094010f5682b99ec

    • SHA1

      7b4b5ed08de7cbd2d7c499fd1e980f2ce0199181

    • SHA256

      27cce5adc271a57236913ea2c2af6bbe15747a3f458f4f45fb33c81d26225220

    • SHA512

      611a7c3568bd452cd14cbc82742712c9f1af467e4e030a8772c46101070f8bb8e77eba1b48ef7aa235d0aedb9f7e7ec36f832e1252ea7669dec7b5fb8f630c81

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5DEya/AOKh0uw1ndSgo5:h1OgLdaOIIOKiJJo

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks