Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    test.tri.age.albi.exe

  • Size

    23.0MB

  • Sample

    240418-3ycpjabe9w

  • MD5

    f5ca45e07dfce923acce9d3160551f25

  • SHA1

    92b09f6782032c1322ffd1cb2ed4e29a0da294c0

  • SHA256

    3ba761720a2cccea2b82c99f5f274049fb6686146c5e876a6dbbc1e97f90b978

  • SHA512

    9d3dcf5d621fa4fe001c160f33e4874bcb196a2a19e659218a41581535df592d95f4ae3ade7ce73b9159831acbeca768b664f12adc265c4e2b645b4605b4fe07

  • SSDEEP

    393216:NWvz+XOVzrlICtL+9qzTREnBSVkRIrY874hDgD7fEUyIPIYvvzm66WCo6:4z+XOxiA+9q/YzcY874Vq7fEbIPb0Vo6

Malware Config

Targets

    • Target

      test.tri.age.albi.exe

    • Size

      23.0MB

    • MD5

      f5ca45e07dfce923acce9d3160551f25

    • SHA1

      92b09f6782032c1322ffd1cb2ed4e29a0da294c0

    • SHA256

      3ba761720a2cccea2b82c99f5f274049fb6686146c5e876a6dbbc1e97f90b978

    • SHA512

      9d3dcf5d621fa4fe001c160f33e4874bcb196a2a19e659218a41581535df592d95f4ae3ade7ce73b9159831acbeca768b664f12adc265c4e2b645b4605b4fe07

    • SSDEEP

      393216:NWvz+XOVzrlICtL+9qzTREnBSVkRIrY874hDgD7fEUyIPIYvvzm66WCo6:4z+XOxiA+9q/YzcY874Vq7fEbIPb0Vo6

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks