Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b04571fa81d48387fc39a6e156a014ea

  • Size

    1.3MB

  • Sample

    240409-28a31shb34

  • MD5

    b04571fa81d48387fc39a6e156a014ea

  • SHA1

    ae94cca44f04f4595aea1ad55dc54aa0d693aa9e

  • SHA256

    5ff952a681d31d7f2dad201fd23572dc39c07a89530434c6a2f4097f76ee321a

  • SHA512

    2ba3e049d04d5f7b05ee6fc35beec3fa8e0c63b6052705ad0dd556e8a694cc6a28026f662ee2fcc602fba9e0b189cd42203ee10dcf37729677cf9631d931832e

  • SSDEEP

    24576:lUT8TXG014m5VZMn2/8ipWybZIFEAoje3Q4sOY78dex2oVuJKbmOnF4S:+uG0mm/ZEPiWaaGOYoOuJOPFb

Malware Config

Targets

    • Target

      b04571fa81d48387fc39a6e156a014ea

    • Size

      1.3MB

    • MD5

      b04571fa81d48387fc39a6e156a014ea

    • SHA1

      ae94cca44f04f4595aea1ad55dc54aa0d693aa9e

    • SHA256

      5ff952a681d31d7f2dad201fd23572dc39c07a89530434c6a2f4097f76ee321a

    • SHA512

      2ba3e049d04d5f7b05ee6fc35beec3fa8e0c63b6052705ad0dd556e8a694cc6a28026f662ee2fcc602fba9e0b189cd42203ee10dcf37729677cf9631d931832e

    • SSDEEP

      24576:lUT8TXG014m5VZMn2/8ipWybZIFEAoje3Q4sOY78dex2oVuJKbmOnF4S:+uG0mm/ZEPiWaaGOYoOuJOPFb

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks