Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c72f6d89631f9f78fa2c00c9b3e523e9

  • Size

    4.3MB

  • Sample

    240314-acl2vsfg68

  • MD5

    c72f6d89631f9f78fa2c00c9b3e523e9

  • SHA1

    96366d42653db8a38359fc696b57e6093171d25b

  • SHA256

    6effc4e5633ed39e247c804107baebb2f61d7e0c432e257da400304393634a1f

  • SHA512

    e3d68552ffcf08a6bbd542a0f63d4130e59d9d2e4dff1977479d5990fac6d91f744e653055f366f7e86d7eba72031becf49ff9651958d01521bf607286c045be

  • SSDEEP

    49152:iENvofplj5Uv3J2RAR5FeA6w/oJdXN0BMOwLloBrughqnstLet3LyFgitQMZgdem:7ofxWqJdXN0B7+sTqnstLEegiod9oq

Malware Config

Targets

    • Target

      c72f6d89631f9f78fa2c00c9b3e523e9

    • Size

      4.3MB

    • MD5

      c72f6d89631f9f78fa2c00c9b3e523e9

    • SHA1

      96366d42653db8a38359fc696b57e6093171d25b

    • SHA256

      6effc4e5633ed39e247c804107baebb2f61d7e0c432e257da400304393634a1f

    • SHA512

      e3d68552ffcf08a6bbd542a0f63d4130e59d9d2e4dff1977479d5990fac6d91f744e653055f366f7e86d7eba72031becf49ff9651958d01521bf607286c045be

    • SSDEEP

      49152:iENvofplj5Uv3J2RAR5FeA6w/oJdXN0BMOwLloBrughqnstLet3LyFgitQMZgdem:7ofxWqJdXN0B7+sTqnstLEegiod9oq

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks