Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-27_3c0299df1bbbd5f4705130b061713599_bkransomware

  • Size

    96KB

  • Sample

    240427-e7qezsbb33

  • MD5

    3c0299df1bbbd5f4705130b061713599

  • SHA1

    29b6e0288cee384c7838bc7c9bb4fb5306cad975

  • SHA256

    8f5c6dd196751f3fffef20248ecaa72bd3c2f37d5d1ecb5824b8b3d53512d88d

  • SHA512

    7e16a3b8c68b53fd35dc92384c9f3e25c866fd9368cc8a7f22344452fff8b21493d96f6f4d86277fc5de9b977cdaa56cb8a96e9baf4410d9935369ce2edeb554

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazT9EKoT9f0XLHdaTQzx7A:ZRpAyazIliazT9EKoT50b9aG7A

Malware Config

Targets

    • Target

      2024-04-27_3c0299df1bbbd5f4705130b061713599_bkransomware

    • Size

      96KB

    • MD5

      3c0299df1bbbd5f4705130b061713599

    • SHA1

      29b6e0288cee384c7838bc7c9bb4fb5306cad975

    • SHA256

      8f5c6dd196751f3fffef20248ecaa72bd3c2f37d5d1ecb5824b8b3d53512d88d

    • SHA512

      7e16a3b8c68b53fd35dc92384c9f3e25c866fd9368cc8a7f22344452fff8b21493d96f6f4d86277fc5de9b977cdaa56cb8a96e9baf4410d9935369ce2edeb554

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazT9EKoT9f0XLHdaTQzx7A:ZRpAyazIliazT9EKoT50b9aG7A

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks