Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-27_8da2bf47e54a8858b398bf3a1dad5699_bkransomware

  • Size

    71KB

  • Sample

    240427-v3gv2sdh4t

  • MD5

    8da2bf47e54a8858b398bf3a1dad5699

  • SHA1

    089462b0f8137ee4759bc7dd6f046abe8f100dee

  • SHA256

    29fe12e4067f1c318ce95b5203736bcf4f5cb97c31b8079d89ded2afaa6cd216

  • SHA512

    edc11620530131037a02d66fe9092f70b4ed6e698ad048b765990c1f13634732a3106a570896a568e4aef3d5b0c15efb7318ac825271423f09bd418b20e69bd6

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTEwV:ZhpAyazIlyazT7V

Malware Config

Targets

    • Target

      2024-04-27_8da2bf47e54a8858b398bf3a1dad5699_bkransomware

    • Size

      71KB

    • MD5

      8da2bf47e54a8858b398bf3a1dad5699

    • SHA1

      089462b0f8137ee4759bc7dd6f046abe8f100dee

    • SHA256

      29fe12e4067f1c318ce95b5203736bcf4f5cb97c31b8079d89ded2afaa6cd216

    • SHA512

      edc11620530131037a02d66fe9092f70b4ed6e698ad048b765990c1f13634732a3106a570896a568e4aef3d5b0c15efb7318ac825271423f09bd418b20e69bd6

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTEwV:ZhpAyazIlyazT7V

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks